libarchive vulnerabilities (Red Hat)
53 vulnerabilities.
-
libarchiveRed Hat Libarchive: libarchive: use-after-free via aliased mac metadata copy 3.6 Low -
libarchiveRed Hat libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the... 2.5 Low -
libarchiveRed Hat Libarchive: libarchive: signed integer overflow in archive_write_zip_header 2.9 Low -
libarchiveRed Hat Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header 3.9 Low -
libarchiveRed Hat Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() 7.5 High -
libarchiveRed Hat Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive 5.5 Medium -
libarchiveRed Hat Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 7.5 High -
libarchiveRed Hat Libarchive: libarchive: denial of service via malformed iso file processing 6.5 Medium -
libarchiveRed Hat Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 7.5 High -
libarchiveRed Hat Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 7.5 High -
libarchiveRed Hat An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution... 5.5 Medium -
libarchiveRed Hat Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c 7.8 High -
libarchiveRed Hat list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return... 4.0 Medium -
libarchiveRed Hat libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in... 4.0 Medium -
libarchiveRed Hat In libarchive 3.6.1, the software does not check for an error after calling calloc function that... 9.8 Critical -
libarchiveRed Hat Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component... 6.5 Medium -
libarchiveRed Hat An improper link resolution flaw can occur while extracting an archive leading to changing modes,... 7.8 High -
libarchiveRed Hat An improper link resolution flaw while extracting an archive can lead to changing the access... 7.8 High -
libarchiveRed Hat In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds... 5.5 Medium -
libarchiveRed Hat archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0... 7.5 High -
libarchiveRed Hat libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0... 6.5 Medium -
libarchiveRed Hat libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2... 6.5 Medium -
libarchiveRed Hat libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0... 8.8 High -
libarchiveRed Hat libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0... 8.8 High -
libarchiveRed Hat libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in... 6.5 Medium -
libarchiveRed Hat read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one... 7.5 High -
libarchiveRed Hat An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in... 6.5 Medium -
libarchiveRed Hat libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer... 6.5 Medium -
libarchiveRed Hat The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non... 7.5 High -
libarchiveRed Hat libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows... 5.5 Medium -
libarchiveRed Hat Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to... 8.6 High -
libarchiveRed Hat Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a... 6.5 Medium -
libarchiveRed Hat Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in... 7.8 High -
libarchiveRed Hat Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in... 7.8 High -
libarchiveRed Hat The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in... 7.5 High -
libarchiveRed Hat Heap-based buffer overflow in the zip_read_mac_metadata function in... 8.8 High -
libarchiveRed Hat The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and... 5.5 Medium -
libarchiveRed Hat The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before... 5.5 Medium -
libarchiveRed Hat Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in... 7.8 High -
libarchiveRed Hat bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite... 7.5 High -
libarchiveRed Hat The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0... 5.5 Medium -
libarchiveRed Hat The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive... 5.5 Medium -
libarchiveRed Hat The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows... 5.5 Medium -
libarchiveRed Hat The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in... 5.5 Medium -
libarchiveRed Hat The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in... 6.5 Medium -
libarchiveRed Hat The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0... 5.5 Medium -
libarchiveRed Hat The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers... 7.5 High -
libarchiveRed Hat The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0... 5.5 Medium -
libarchiveRed Hat The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive... 7.5 High -
libarchiveRed Hat bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL... 7.5 High - Show olderLoading…