Количество 13
Количество 13
GHSA-gpgf-w78r-4pvj
In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference or, in some cases, even arbitrary code execution.
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
CVE-2022-36227
In libarchive before 3.6.2 the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances when NULL is equivalent to the 0x0 memory address and privileged code can access it then writing or reading memory is possible which may lead to code execution."
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error a ...
SUSE-SU-2022:4296-1
Security update for libarchive
SUSE-SU-2022:4209-1
Security update for libarchive
SUSE-SU-2022:4202-1
Security update for libarchive
ROS-20221216-01
Уязвимость libarchive
ELSA-2023-3018
ELSA-2023-3018: libarchive security update (LOW)
ELSA-2023-2532
ELSA-2023-2532: libarchive security update (LOW)
BDU:2022-07496
Уязвимость функции calloc() библиотеки архивирования libarchive, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-gpgf-w78r-4pvj In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference or, in some cases, even arbitrary code execution. | CVSS3: 9.8 | 0% Низкий | около 3 лет назад |
 | CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution." | CVSS3: 9.8 | 0% Низкий | около 3 лет назад |
 | CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution." | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution." | CVSS3: 9.8 | 0% Низкий | около 3 лет назад |
 | CVE-2022-36227 In libarchive before 3.6.2 the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances when NULL is equivalent to the 0x0 memory address and privileged code can access it then writing or reading memory is possible which may lead to code execution." | CVSS3: 9.8 | 0% Низкий | около 3 лет назад |
| CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error a ... | CVSS3: 9.8 | 0% Низкий | около 3 лет назад |
 | SUSE-SU-2022:4296-1 Security update for libarchive | 0% Низкий | около 3 лет назад | |
| SUSE-SU-2022:4209-1 Security update for libarchive | 0% Низкий | около 3 лет назад | |
| SUSE-SU-2022:4202-1 Security update for libarchive | 0% Низкий | около 3 лет назад | |
 | ROS-20221216-01 Уязвимость libarchive | CVSS3: 9.8 | 0% Низкий | почти 3 года назад |
| ELSA-2023-3018 ELSA-2023-3018: libarchive security update (LOW) | больше 2 лет назад | ||
| ELSA-2023-2532 ELSA-2023-2532: libarchive security update (LOW) | больше 2 лет назад | ||
 | BDU:2022-07496 Уязвимость функции calloc() библиотеки архивирования libarchive, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 9.8 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу