Количество 13
Количество 13
BDU:2022-07496
Уязвимость функции calloc() библиотеки архивирования libarchive, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
CVE-2022-36227
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error a ...
SUSE-SU-2022:4296-1
Security update for libarchive
SUSE-SU-2022:4209-1
Security update for libarchive
SUSE-SU-2022:4202-1
Security update for libarchive
ROS-20221216-01
Уязвимость libarchive
GHSA-gpgf-w78r-4pvj
In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference or, in some cases, even arbitrary code execution.
ELSA-2023-3018
ELSA-2023-3018: libarchive security update (LOW)
ELSA-2023-2532
ELSA-2023-2532: libarchive security update (LOW)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-07496 Уязвимость функции calloc() библиотеки архивирования libarchive, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 9.8 | 0% Низкий | около 3 лет назад |
 | CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution." | CVSS3: 9.8 | 0% Низкий | почти 3 года назад |
 | CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution." | CVSS3: 5.9 | 0% Низкий | около 3 лет назад |
 | CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution." | CVSS3: 9.8 | 0% Низкий | почти 3 года назад |
 | CVSS3: 9.8 | 0% Низкий | почти 3 года назад | |
| CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error a ... | CVSS3: 9.8 | 0% Низкий | почти 3 года назад |
 | SUSE-SU-2022:4296-1 Security update for libarchive | 0% Низкий | почти 3 года назад | |
| SUSE-SU-2022:4209-1 Security update for libarchive | 0% Низкий | почти 3 года назад | |
| SUSE-SU-2022:4202-1 Security update for libarchive | 0% Низкий | почти 3 года назад | |
 | ROS-20221216-01 Уязвимость libarchive | CVSS3: 9.8 | 0% Низкий | больше 2 лет назад |
| GHSA-gpgf-w78r-4pvj In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference or, in some cases, even arbitrary code execution. | CVSS3: 9.8 | 0% Низкий | почти 3 года назад |
| ELSA-2023-3018 ELSA-2023-3018: libarchive security update (LOW) | больше 2 лет назад | ||
| ELSA-2023-2532 ELSA-2023-2532: libarchive security update (LOW) | больше 2 лет назад |
Уязвимостей на страницу