Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 82

Export CSV
CVE-2024-48958

libarchive: Out-of-bounds access in libarchive's RAR file handling

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2024-48957

libarchive: Out-of-bounds access in libarchive's archive file handling

execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2025-25724

libarchive: Buffer Overflow vulnerability in libarchive

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux
CVE-2024-37407

libarchive: Out of bounds access in slurp_central_directory at archive_read_support_format_zip.c

Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directory in archive_read_support_format_zip.c.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2016-10350

libarchive: Heap-based buffer over-read in the archive_read_format_cab_read_header function

The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2016-10349

libarchive: Heap-based buffer over-read in the archive_le32dec function

The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2016-10209

libarchive: NULL pointer dereference in archive_wstring_append_from_mbs function

The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2017-14502

libarchive: Off-by-one error in the read_header function

read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux
CVE-2017-14166

libarchive: Heap-based buffer over-read in the atol8 function

libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Libarchive and 1 more
Products
Ubuntu Linux Debian Linux Libarchive and 1 more
CVE-2016-8689

libarchive: heap based buffer overflow in read_header (archive_read_support_format_7zip.c)

The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Libarchive Opensuse
Products
Libarchive Leap
CVE-2016-8688

libarchive: heap based buffer overflow in detect_form (archive_read_support_format_mtree.c)

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Libarchive Opensuse
Products
Libarchive Leap
CVE-2016-8687

libarchive: stack based buffer overflow in bsdtar_expand_char (util.c)

Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename.

CVSS 3.0 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Libarchive Opensuse
Products
Libarchive Leap
CVE-2017-5601

libarchive: Out of bounds read in lha_read_file_header_1() function

An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2017-14503

libarchive: Out-of-bounds read in lha_read_data_none

libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux
CVE-2017-14501

libarchive: Out-of-bounds read in parse_file_info

An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux
CVE-2024-48615

libarchive: Null Pointer Dereference in Libarchive

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2016-5418

libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

CVSS 3.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Libarchive Oracle Redhat
Products
Libarchive Linux Enterprise Linux and 8 more
CVE-2016-4809

libarchive: Memory allocate error with symbolic links in cpio archives

The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.

CVSS 3.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Libarchive Oracle Redhat
Products
Libarchive Linux Enterprise Linux and 7 more