WID-SEC-W-2024-2070

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

libarchive: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2019-01-09

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libarchive ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2018-1000880USmedium6.5—
libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - liba…
CVE-2018-1000879USmedium6.5—
libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libar…
CVE-2018-1000878UShigh8.8—
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/arc…
CVE-2018-1000877UShigh8.8—
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archiv…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan