Libarchive vulnerabilities

Products

• Libarchive 78

Newest

• libarchive libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the... CVE-2025-64031 Fix available 2.5 LowJuly 23, 2026
• libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive CVE-2026-5745 Fix available 5.5 MediumApril 7, 2026
• libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 more Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing CVE-2026-5121 Fix available 7.5 HighMarch 30, 2026
• libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Libarchive: libarchive: denial of service via malformed iso file processing CVE-2026-4426 Fix available 6.5 MediumMarch 19, 2026
• libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +39 more +41 more Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing CVE-2026-4424 Fix available 7.5 HighMarch 19, 2026
• libarchive An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution... CVE-2025-60753 Fix available 5.5 MediumNovember 5, 2025
• libarchive, red hat cert-manager operator for red hat openshift 1.16, compliance operator 1 +35 more +37 more Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c CVE-2025-5914 Fix available 7.8 HighJune 9, 2025
• libarchive, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libarchive: reading past eof may be triggered for piped file streams CVE-2025-5918 Fix available 3.9 LowJune 9, 2025
• libarchive, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c CVE-2025-5917 Fix available 2.8 LowJune 9, 2025
• libarchive, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c CVE-2025-5916 Fix available 3.9 LowJune 9, 2025
• libarchive, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c CVE-2025-5915 Public exploitFix available 6.6 MediumJune 9, 2025
• libarchive Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program... CVE-2024-48615 Fix available 7.5 HighMarch 28, 2025
• libarchive list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return... CVE-2025-25724 Fix available 4.0 MediumMarch 2, 2025
• libarchive libarchive bsdunzip.c list null pointer dereference CVE-2025-1632 Fix available 4.8 MediumFebruary 24, 2025
• libarchive libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in... CVE-2024-57970 Fix available 4.0 MediumFebruary 16, 2025
• libarchive execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out... CVE-2024-48958 Fix available 7.8 HighOctober 10, 2024
• libarchive execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out... CVE-2024-48957 Fix available 7.8 HighOctober 10, 2024
• libarchive Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name... CVE-2024-37407 Fix available 9.1 CriticalJune 8, 2024
• libarchive, fedoraproject fedora, microsoft windows 11 version 22h2 +6 more +8 more Libarchive Remote Code Execution Vulnerability CVE-2024-26256 Fix available EPSS 87.9% 7.8 HighApril 9, 2024
• libarchive Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask()... CVE-2023-30571 Fix available 3.9 LowMay 29, 2023
• libarchive, debian linux, fedoraproject fedora +1 more +3 more In libarchive 3.6.1, the software does not check for an error after calling calloc function that... CVE-2022-36227 Fix available 9.8 CriticalNovember 22, 2022
• libarchive, fedoraproject fedora +1 more Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component... CVE-2022-26280 Fix available 6.5 MediumMarch 28, 2022
• debian linux, fedoraproject fedora, libarchive +11 more +13 more An improper link resolution flaw can occur while extracting an archive leading to changing modes,... CVE-2021-31566 Fix available 7.8 HighDecember 24, 2021
• debian linux, fedoraproject fedora, libarchive +10 more +12 more An improper link resolution flaw while extracting an archive can lead to changing the access... CVE-2021-23177 Fix available 7.8 HighDecember 24, 2021
• libarchive, apple ipados, iphone os +4 more +6 more libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from... CVE-2021-36976 Fix available 6.5 MediumJuly 20, 2021
• libarchive Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3... CVE-2020-21674 6.5 MediumOctober 15, 2020
• libarchive, canonical ubuntu linux, fedoraproject fedora +2 more archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with... CVE-2020-9308 Fix available 8.8 HighFebruary 20, 2020
• libarchive, canonical ubuntu linux, debian linux +1 more +3 more In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds... CVE-2019-19221 Fix available 5.5 MediumNovember 21, 2019
• libarchive, canonical ubuntu linux, debian linux +2 more archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0... CVE-2019-18408 Fix available 7.5 HighOctober 24, 2019
• libarchive A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in... CVE-2019-11463 5.5 MediumApril 23, 2019
• libarchive, canonical ubuntu linux, debian linux +5 more +7 more libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0... CVE-2019-1000020 Fix available 6.5 MediumFebruary 4, 2019
• libarchive, canonical ubuntu linux, debian linux +5 more +7 more libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2... CVE-2019-1000019 Fix available 6.5 MediumFebruary 4, 2019
• libarchive, fedoraproject fedora, opensuse leap +2 more libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0... CVE-2018-1000879 Fix available 6.5 MediumDecember 20, 2018
• libarchive, canonical ubuntu linux, fedoraproject fedora +1 more +3 more libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0... CVE-2018-1000880 Fix available 6.5 MediumDecember 20, 2018
• libarchive, canonical ubuntu linux, debian linux +5 more +7 more libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0... CVE-2018-1000878 Fix available 8.8 HighDecember 20, 2018
• libarchive, canonical ubuntu linux, debian linux +4 more +6 more libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0... CVE-2018-1000877 Fix available 8.8 HighDecember 20, 2018
• libarchive libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in... CVE-2017-14503 Fix available 6.5 MediumSeptember 17, 2017
• libarchive read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one... CVE-2017-14502 Fix available 7.5 HighSeptember 17, 2017
• libarchive An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in... CVE-2017-14501 Fix available 6.5 MediumSeptember 17, 2017
• libarchive, canonical ubuntu linux, debian linux +2 more libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer... CVE-2017-14166 Fix available 6.5 MediumSeptember 6, 2017
• libarchive The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in... CVE-2016-10350 Fix available 5.5 MediumApril 30, 2017
• libarchive The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to... CVE-2016-10349 Fix available 5.5 MediumApril 30, 2017
• libarchive The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows... CVE-2016-10209 Fix available 5.5 MediumApril 3, 2017
• libarchive An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in... CVE-2017-5601 Fix available 7.5 HighJanuary 27, 2017
• libarchive, opensuse leap +1 more The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote... CVE-2016-8689 Fix available 7.5 HighOctober 17, 2016
• libarchive, opensuse leap +1 more The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read... CVE-2016-8688 Fix available 5.5 MediumOctober 17, 2016
• libarchive, opensuse leap +1 more Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows... CVE-2016-8687 Fix available 7.5 HighOctober 17, 2016
• libarchive, oracle linux, redhat enterprise linux desktop +7 more +9 more The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non... CVE-2016-5418 Fix available 7.5 HighSeptember 21, 2016
• libarchive The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3... CVE-2015-8927 Fix available 5.5 MediumSeptember 20, 2016
• libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 more libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows... CVE-2016-7166 Fix available 5.5 MediumSeptember 10, 2016
• Show olderLoading…