Page 3 of 57 results (0.012 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-10350 – Debian Security Advisory 4360-1

https://notcve.org/view.php?id=CVE-2016-10350

01 May 2017 — The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. archive_read_support_format_cab.c en libarchive 3.2.2 permite a atacantes remotos provocar una denegación de servicio (sobre-lectura de búfer basada en memoria dinámica y caída de aplicación) a través de un fichero manipulado. Multiple security issues were found in libarchive, a m... • https://github.com/libarchive/libarchive/issues/835 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2016-10209 – Debian Security Advisory 4360-1

https://notcve.org/view.php?id=CVE-2016-10209

03 Apr 2017 — The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file. La función archive_wstring_append_from_mbs en archive_string.c en libarchive 3.2.2 permite a atacantes remotos provocar una denegación de servicio (Referencia al puntero NULL y caída de la aplicación) a través de un archivo manipulado. It was discovered that libarchive incorrectly handled certain... • http://www.securityfocus.com/bid/97327 • CWE-476: NULL Pointer Dereference •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-5601 – Ubuntu Security Notice USN-3225-1

https://notcve.org/view.php?id=CVE-2017-5601

27 Jan 2017 — An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive. Un error en la función lha_read_file_header_1() (archive_read_support_format_lha.c) en libarchive 3.2.2 permite a un atacantes desencadenar un acceso de lectura fuera de límites de la memoria y posteriormente provocar una caída a través de un archivo especialmente manipu... • http://www.securityfocus.com/bid/95837 • CWE-125: Out-of-bounds Read •

CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0

CVE-2016-8687 – Apple Security Advisory 2017-01-23-4

https://notcve.org/view.php?id=CVE-2016-8687

02 Jan 2017 — Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename. Desbordamiento de búfer basado en pila en la función safe_fprintf en tar/util.c en libarchive 3.2.1 permite a atacantes remotos provocar una denegación de servicio a través de un carácter multibyte manipulado no imprimible en un nombre de archivo. It was discovered that libarchive incorrectly handled har... • http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2016-8688 – Gentoo Linux Security Advisory 201701-03

https://notcve.org/view.php?id=CVE-2016-8688

02 Jan 2017 — The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c. El licitador mtree en libarchive 3.2.1 no realiza un seguimiento de los tamaños de línea cuando amplía la lectura anticipada, lo que permite a atacantes remotos provocar una denegación de serv... • http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html • CWE-125: Out-of-bounds Read •

CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0

CVE-2016-8689 – Gentoo Linux Security Advisory 201701-03

https://notcve.org/view.php?id=CVE-2016-8689

02 Jan 2017 — The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive. La función read_Header en archive_read_support_format_7zip.c en libarchive 3.2.1 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) a través de múltiples atributos EmptyStream en una cabecera en un archivo 7zip. It was discovered that libarchive in... • http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 2

CVE-2016-4301 – Gentoo Linux Security Advisory 201701-03

https://notcve.org/view.php?id=CVE-2016-4301

21 Sep 2016 — Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file. Desbordamiento de búfer basado en pila en la función parse_device en archive_read_support_format_mtree.c en libarchive en versiones anteriores a 3.2.1 permite a atacantes remotos ejecutar código arbitrario a través de un archivo mtree manipulado. Multiple vulnerabilities have been found in libarchive, the worst ... • http://blog.talosintel.com/2016/06/the-poisoned-archives.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 2

CVE-2015-8915 – Gentoo Linux Security Advisory 201701-03

https://notcve.org/view.php?id=CVE-2015-8915

20 Sep 2016 — bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file. bsdcpio en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (lectura no válida y caída) a través de un archivo cpio manipulado. Multiple vulnerabilities have been found in libarchive, the worst of which allows for the remote execution of arbitrary code. Versions less than 3.2.2 are affected. • http://www.openwall.com/lists/oss-security/2016/06/17/2 • CWE-125: Out-of-bounds Read •

CVSS: 7.5EPSS: 2%CPEs: 4EXPL: 0

CVE-2015-8918 – Gentoo Linux Security Advisory 201701-03

https://notcve.org/view.php?id=CVE-2015-8918

20 Sep 2016 — The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to "overlapping memcpy." La función archive_string_append en archive_string.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo cab manipulado, relacionado con "superposición de memcpy". Multiple vulnerabilities have been found in libarchive, th... • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2015-8927 – Gentoo Linux Security Advisory 201701-03

https://notcve.org/view.php?id=CVE-2015-8927

20 Sep 2016 — The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted zip file, related to reading the password. La función trad_enc_decrypt_update en archive_read_support_format_zip.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria dinámica fuera de rango y caída) a través de un archivo zip man... • http://www.openwall.com/lists/oss-security/2016/06/17/2 • CWE-125: Out-of-bounds Read •