CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Libarchive » Libarchive » * * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*
CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2021-36976 416 2021-07-20 2022-03-30
4.3
 None Remote Medium Not required None None Partial
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
2 CVE-2020-9308 787 2020-02-20 2022-01-01
6.8
 None Remote Medium Not required Partial Partial Partial
archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact.
3 CVE-2019-1000020 835 2019-02-04 2020-08-24
4.3
 None Remote Medium Not required None None Partial
libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.
4 CVE-2019-1000019 125 DoS 2019-02-04 2019-11-06
4.3
 None Remote Medium Not required None None Partial
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
5 CVE-2019-11463 401 DoS 2019-04-23 2020-12-08
4.3
 None Remote Medium Not required None None Partial
A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.
6 CVE-2018-1000880 119 Overflow 2018-12-20 2020-08-24
4.3
 None Remote Medium Not required None None Partial
libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a specially crafted WARC file.
7 CVE-2018-1000879 476 2018-12-20 2019-11-06
4.3
 None Remote Medium Not required None None Partial
libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.
8 CVE-2018-1000878 416 2018-12-20 2019-11-06
6.8
 None Remote Medium Not required Partial Partial Partial
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
9 CVE-2018-1000877 415 2018-12-20 2019-11-06
6.8
 None Remote Medium Not required Partial Partial Partial
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
10 CVE-2016-7166 399 DoS 2016-09-21 2019-12-27
4.3
 None Remote Medium Not required None None Partial
libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.
11 CVE-2016-6250 190 DoS Exec Code Overflow 2016-09-21 2019-12-27
7.5
 None Remote Low Not required Partial Partial Partial
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
12 CVE-2016-5844 190 DoS Overflow 2016-09-21 2019-12-27
4.3
 None Remote Medium Not required None None Partial
Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
13 CVE-2016-5418 20 2016-09-21 2019-12-27
5.0
 None Remote Low Not required None Partial None
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
14 CVE-2016-4809 20 DoS 2016-09-21 2019-12-27
5.0
 None Remote Low Not required None None Partial
The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.
15 CVE-2016-4302 119 Exec Code Overflow 2016-09-21 2017-11-04
6.8
 None Remote Medium Not required Partial Partial Partial
Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.
16 CVE-2016-4301 119 Exec Code Overflow 2016-09-21 2017-07-01
6.8
 None Remote Medium Not required Partial Partial Partial
Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file.
17 CVE-2016-4300 190 Exec Code Overflow 2016-09-21 2017-11-04
6.8
 None Remote Medium Not required Partial Partial Partial
Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.
18 CVE-2016-1541 20 Exec Code Overflow 2016-05-07 2018-01-05
6.8
 None Remote Medium Not required Partial Partial Partial
Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.
19 CVE-2015-8934 125 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
20 CVE-2015-8933 190 DoS Overflow 2016-09-20 2017-11-04
4.3
 None Remote Medium Not required None None Partial
Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.
21 CVE-2015-8932 20 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.
22 CVE-2015-8931 190 Overflow 2016-09-20 2018-01-05
6.8
 None Remote Medium Not required Partial Partial Partial
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.
23 CVE-2015-8930 20 DoS 2016-09-20 2018-01-05
5.0
 None Remote Low Not required None None Partial
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.
24 CVE-2015-8929 119 DoS Overflow 2016-09-20 2017-07-01
4.3
 None Remote Medium Not required None None Partial
Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file.
25 CVE-2015-8928 125 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
26 CVE-2015-8927 125 DoS 2016-09-20 2017-07-01
4.3
 None Remote Medium Not required None None Partial
The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted zip file, related to reading the password.
27 CVE-2015-8926 476 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.
28 CVE-2015-8925 125 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.
29 CVE-2015-8924 125 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file.
30 CVE-2015-8923 20 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.
31 CVE-2015-8922 476 DoS 2016-09-20 2019-12-27
4.3
 None Remote Medium Not required None None Partial
The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.
32 CVE-2015-8921 125 DoS 2016-09-20 2018-01-05
5.0
 None Remote Low Not required None None Partial
The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
33 CVE-2015-8920 125 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.
34 CVE-2015-8919 119 DoS Overflow 2016-09-20 2018-01-05
5.0
 None Remote Low Not required None None Partial
The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap) via a crafted (1) lzh or (2) lha file.
35 CVE-2015-8918 119 DoS Overflow 2016-09-20 2017-07-01
5.0
 None Remote Low Not required None None Partial
The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to "overlapping memcpy."
36 CVE-2015-8917 476 DoS 2016-09-20 2018-01-05
5.0
 None Remote Low Not required None None Partial
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.
37 CVE-2015-8916 476 DoS 2016-09-20 2018-01-05
4.3
 None Remote Medium Not required None None Partial
bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file.
38 CVE-2015-8915 125 DoS 2016-09-20 2018-11-30
4.3
 None Remote Medium Not required None None Partial
bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file.
Total number of vulnerabilities : 38   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.