Количество 15
Количество 15
CVE-2018-1000877
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
CVE-2018-1000877
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
CVE-2018-1000877
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
CVE-2018-1000877
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onw ...
GHSA-rfww-wwgq-55v3
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
BDU:2019-01251
Уязвимость библиотеки для работы с архивами Libarchive, связанная с двойным освобождением памяти, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-01729
Уязвимость плагина rustdoc языка программирования Rust, позволяющая нарушителю выполнить произвольный код
openSUSE-SU-2019:2632-1
Security update for libarchive
openSUSE-SU-2019:2615-1
Security update for libarchive
SUSE-SU-2019:3093-1
Security update for libarchive
ELSA-2019-3698
ELSA-2019-3698: libarchive security and bug fix update (MODERATE)
ELSA-2019-2298
ELSA-2019-2298: libarchive security update (MODERATE)
openSUSE-SU-2019:1196-1
Security update for libarchive
SUSE-SU-2019:0831-1
Security update for libarchive
SUSE-SU-2019:3092-1
Security update for libarchive
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2018-1000877 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive. | CVSS3: 8.8 | 2% Низкий | около 7 лет назад | |
CVE-2018-1000877 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive. | CVSS3: 7 | 2% Низкий | около 7 лет назад | |
CVE-2018-1000877 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive. | CVSS3: 8.8 | 2% Низкий | около 7 лет назад | |
CVE-2018-1000877 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onw ... | CVSS3: 8.8 | 2% Низкий | около 7 лет назад | |
GHSA-rfww-wwgq-55v3 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive. | CVSS3: 8.8 | 2% Низкий | больше 3 лет назад | |
BDU:2019-01251 Уязвимость библиотеки для работы с архивами Libarchive, связанная с двойным освобождением памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.8 | 2% Низкий | около 7 лет назад | |
BDU:2020-01729 Уязвимость плагина rustdoc языка программирования Rust, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.3 | 1% Низкий | больше 7 лет назад | |
openSUSE-SU-2019:2632-1 Security update for libarchive | около 6 лет назад | |||
openSUSE-SU-2019:2615-1 Security update for libarchive | около 6 лет назад | |||
SUSE-SU-2019:3093-1 Security update for libarchive | около 6 лет назад | |||
ELSA-2019-3698 ELSA-2019-3698: libarchive security and bug fix update (MODERATE) | около 6 лет назад | |||
ELSA-2019-2298 ELSA-2019-2298: libarchive security update (MODERATE) | больше 6 лет назад | |||
openSUSE-SU-2019:1196-1 Security update for libarchive | почти 7 лет назад | |||
SUSE-SU-2019:0831-1 Security update for libarchive | почти 7 лет назад | |||
SUSE-SU-2019:3092-1 Security update for libarchive | около 6 лет назад |
Уязвимостей на страницу