Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 82

Export CSV
CVE-2016-1541

libarchive: zip_read_mac_metadata() heap-based buffer overflow

Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.

CVSS 3.0 · 8.8 High EPSS 10.3% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux
CVE-2016-4300

libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo

Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.

CVSS 3.0 · 7.8 High EPSS 4.9% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2016-4301

libarchive: Stack buffer overflow in the mtree parse_device

Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file.

CVSS 3.0 · 7.8 High EPSS 3.7% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2016-4302

libarchive: Heap buffer overflow in the Rar decompression functionality

Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.

CVSS 3.0 · 7.8 High EPSS 4.8% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2016-4809

libarchive: Memory allocate error with symbolic links in cpio archives

The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.

CVSS 3.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Libarchive Oracle Redhat
Products
Libarchive Linux Enterprise Linux and 7 more
CVE-2016-5418

libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

CVSS 3.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Libarchive Oracle Redhat
Products
Libarchive Linux Enterprise Linux and 8 more
CVE-2016-6250

libarchive: Buffer overflow when writing large iso9660 containers

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

CVSS 3.0 · 8.6 High EPSS 6.3% KEV · Not listed
Vendors
Libarchive Oracle Redhat
Products
Libarchive Linux Enterprise Linux
CVE-2016-7166

libarchive: Denial of service using a crafted gzip file

libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Libarchive Oracle Redhat
Products
Libarchive Linux Enterprise Linux and 7 more
CVE-2013-0211

libarchive: read buffer overflow on 64-bit systems

Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.

CVSS 2.0 · 5.0 Medium EPSS 3.9% KEV · Not listed
Vendors
Canonical Fedoraproject Freebsd and 2 more
Products
Ubuntu Linux Fedora Freebsd and 2 more
CVE-2025-1632

libarchive bsdunzip.c list null pointer dereference

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2023-30571

libarchive: Race condition in multi-threaded use of archive_write_disk_header() on posix based systems

Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-privileged local user can delete and rename files inside those directories.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2021-23177

libarchive: extracting a symlink with ACLs modifies ACLs of target

An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Libarchive and 1 more
Products
Debian Linux Fedora Libarchive and 10 more
CVE-2020-9308

libarchive: attempts to unpack a RAR5 file with an invalid or corrupted header leads to a SIGSEGV

archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Canonical Fedoraproject Libarchive
Products
Ubuntu Linux Fedora Libarchive
CVE-2020-21674

libarchive: heap-based buffer overflow in archive_string_append_from_wcs function in archive_string.c

Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2019-19221

libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-18408

libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Canonical Debian Libarchive and 2 more
Products
Ubuntu Linux Debian Linux Libarchive and 3 more
CVE-2019-11463

libarchive: memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c causing denial of service via crafted zip file

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2019-1000020

libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service

libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.

CVSS 3.1 · 6.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 6 more
CVE-2019-1000019

libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service

libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.

CVSS 3.1 · 6.5 Medium EPSS 3.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 6 more
CVE-2018-1000878

libarchive: Use after free in RAR decoder resulting in a denial of service

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.

CVSS 3.1 · 8.8 High EPSS 4.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 6 more