Search for packages
| purl | pkg:deb/debian/libarchive@2.4.17-2 |
| Next non-vulnerable version | 3.3.3-4+deb10u1 |
| Latest non-vulnerable version | 3.3.3-4+deb10u1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4hvy-whmq-53ft
Aliases: CVE-2015-8928 |
The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. |
Affected by 7 other vulnerabilities. |
|
VCID-4t89-41bc-3ba8
Aliases: CVE-2019-1000020 |
multiple issues |
Affected by 0 other vulnerabilities. |
|
VCID-fj5z-72gm-1yhx
Aliases: CVE-2015-2304 |
Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive. |
Affected by 11 other vulnerabilities. |
|
VCID-g5gx-6cyn-wkda
Aliases: CVE-2016-5418 |
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file. |
Affected by 6 other vulnerabilities. |
|
VCID-gu6c-aam9-9bfs
Aliases: CVE-2018-1000877 |
multiple issues |
Affected by 6 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-gue4-gwmq-cud9
Aliases: CVE-2019-1000019 |
multiple issues |
Affected by 0 other vulnerabilities. |
|
VCID-hxfa-y27q-ebbd
Aliases: CVE-2015-8931 |
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior. |
Affected by 7 other vulnerabilities. |
|
VCID-jpyc-ymx3-uuhh
Aliases: CVE-2018-1000879 |
multiple issues |
Affected by 0 other vulnerabilities. |
|
VCID-k2jw-vx9c-1bg3
Aliases: CVE-2018-1000878 |
multiple issues |
Affected by 6 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-n56c-gd3f-1ba1
Aliases: CVE-2018-1000880 |
multiple issues |
Affected by 6 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-pusd-k7nk-tbfc
Aliases: CVE-2015-8924 |
The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file. |
Affected by 7 other vulnerabilities. |
|
VCID-zydt-8bwa-37bw
Aliases: CVE-2016-5844 |
Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file. |
Affected by 7 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||