Поиск уязвимостей

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not c ...

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Уязвимость файла bsdunzip.c библиотеки Libarchive, позволяющая нарушителю вызвать отказ в обслуживании

Moderate: libarchive security update

Moderate: libarchive security update

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

ELSA-2025-9431: libarchive security update (MODERATE)

ELSA-2025-9420: libarchive security update (MODERATE)

Уязвимость функции list_item_verbose() библиотеки Libarchive, позволяющая нарушителю выполнить произвольный код на целевой системе