Описание
Security update for libarchive
This update for libarchive fixes the following issues:
Security issues fixed:
- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).
- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).
- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).
- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).
- CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).
Список пакетов
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Software Development Kit 12 SP5
Ссылки
- Link for SUSE-SU-2019:3092-1
- E-Mail link for SUSE-SU-2019:3092-1
- SUSE Security Ratings
- SUSE Bug 1032089
- SUSE Bug 1037008
- SUSE Bug 1037009
- SUSE Bug 1059134
- SUSE Bug 1059139
- SUSE Bug 1120653
- SUSE Bug 1120654
- SUSE Bug 1124341
- SUSE Bug 1124342
- SUSE Bug 1155079
- SUSE CVE CVE-2016-10209 page
- SUSE CVE CVE-2016-10349 page
- SUSE CVE CVE-2016-10350 page
- SUSE CVE CVE-2017-14501 page
- SUSE CVE CVE-2017-14502 page
- SUSE CVE CVE-2018-1000877 page
- SUSE CVE CVE-2018-1000878 page
Описание
The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file.
Затронутые продукты
Ссылки
- CVE-2016-10209
- SUSE Bug 1032089
Описание
The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
Затронутые продукты
Ссылки
- CVE-2016-10349
- SUSE Bug 1037008
Описание
The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
Затронутые продукты
Ссылки
- CVE-2016-10350
- SUSE Bug 1037009
Описание
An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.
Затронутые продукты
Ссылки
- CVE-2017-14501
- SUSE Bug 1059139
Описание
read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.
Затронутые продукты
Ссылки
- CVE-2017-14502
- SUSE Bug 1059134
Описание
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
Затронутые продукты
Ссылки
- CVE-2018-1000877
- SUSE Bug 1120653
Описание
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
Затронутые продукты
Ссылки
- CVE-2018-1000878
- SUSE Bug 1120654
Описание
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
Затронутые продукты
Ссылки
- CVE-2019-1000019
- SUSE Bug 1124341
Описание
libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.
Затронутые продукты
Ссылки
- CVE-2019-1000020
- SUSE Bug 1124342
Описание
archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.
Затронутые продукты
Ссылки
- CVE-2019-18408
- SUSE Bug 1155079