DeutschShown in its original language — a full translation is planned for a future version.
libarchive: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2019-02-04
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libarchive ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-1000020US | medium6.5 | — | ||
libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulne… | ||||
| CVE-2019-1000019US | medium6.5 | — | ||
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, arch… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2019:2298 vom 2019-08-06external
- Red Hat Security Advisory RHSA-2019:3698 vom 2019-11-05external
- Meldung im Git libarchive vom 2019-01-23external
- F5 Security Advisory K000148255 vom 2024-10-25external
- Arch Linux Security Advisory ASA-201906-21 vom 2019-06-25external
- Ubuntu Security Notice USN-3884-1 vom 2019-02-07external
- WID-SEC-W-2024-3274 - CSAF Versionself
- WID-SEC-2024-3274 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan