Debian Libarchive vulnerabilities

CVE-2015-8927 [MEDIUM] CVE-2015-8927: libarchive - The trad_enc_decrypt_update function in archive_read_support_format_zip.c in lib... The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted zip file, related to reading the password. Scope: local bookworm: resolved (fixed in 3.2.0-2) bullseye: resolved (fixed in 3.2.0-2) forky: resolved (fixed in 3.2

CVE-2015-8933 [MEDIUM] CVE-2015-8933: libarchive - Integer overflow in the archive_read_format_tar_skip function in archive_read_su... Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file. Scope: local bookworm: resolved (fixed in 3.2.0-2) bullseye: resolved (fixed in 3.2.0-2) forky: resolved (fixed in 3.2.0-2) sid: resolved (fixed in 3.2.0-

CVE-2016-8688 [MEDIUM] CVE-2016-8688: libarchive - The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when exte... The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c. Scope: local bookworm: resolved (fixed in 3.2

CVE-2016-10349 [MEDIUM] CVE-2016-10349: libarchive - The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remo... The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 3.2.2-3.1) bullseye: resolved (fixed in 3.2.2-3.1) forky: resolved (fixed in 3.2.2-3.1) sid: resolved (fixed in 3.2.2-3.1) trix

CVE-2016-10350 [MEDIUM] CVE-2016-10350: libarchive - The archive_read_format_cab_read_header function in archive_read_support_format_... The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 3.2.2-3.1) bullseye: resolved (fixed in 3.2.2-3.1) forky: resolved (fixed in 3.2.2-3.1) si

CVE-2025-60753 [MEDIUM] CVE-2025-60753: libarchive - An issue was discovered in libarchive bsdtar before version 3.8.1 in function ap... An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash). Scope: local bookworm: open bullseye: open forky: resolved (fixed in 3.8.4-1) sid: resolved (fixed in 3

CVE-2025-5917 [LOW] CVE-2025-5917: libarchive - A vulnerability has been identified in the libarchive library. This flaw involve... A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be l

CVE-2016-10209 [MEDIUM] CVE-2016-10209: libarchive - The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3... The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file. Scope: local bookworm: resolved (fixed in 3.2.2-3.1) bullseye: resolved (fixed in 3.2.2-3.1) forky: resolved (fixed in 3.2.2-3.1) sid: resolved (fix

CVE-2016-7166 [MEDIUM] CVE-2016-7166: libarchive - libarchive before 3.2.0 does not limit the number of recursive decompressions, w... libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file. Scope: local bookworm: resolved (fixed in 3.2.0-2) bullseye: resolved (fixed in 3.2.0-2) forky: resolved (fixed in 3.2.0-2) sid: resolved (fixed in 3.2.0-2) tr

CVE-2015-8929 [MEDIUM] CVE-2015-8929: libarchive - Memory leak in the __archive_read_get_extract function in archive_read_extract2.... Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file. Scope: local bookworm: resolved (fixed in 3.2.0-2) bullseye: resolved (fixed in 3.2.0-2) forky: resolved (fixed in 3.2.0-2) sid: resolved (fixed in 3.2.0-2) trixie: resolved (fixed in 3.2

CVE-2006-5680 [MEDIUM] CVE-2006-5680: libarchive - The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-0... The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data. Scope: local bookworm: resolved (fix

CVE-2019-19221 [MEDIUM] CVE-2019-19221: libarchive - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an ... In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. Scope: local bookworm: resolved (fixed in 3.4.2-1) bullseye: resolved (fixed in 3.4.2-1) forky: resolved (fixed in 3.4.2-1) sid: resolved (fixed in 3.4.2-1) trixie:

CVE-2024-26256 [HIGH] CVE-2024-26256: libarchive - Libarchive Remote Code Execution Vulnerability Libarchive Remote Code Execution Vulnerability Scope: local bookworm: resolved (fixed in 3.6.2-1+deb12u1) bullseye: resolved forky: resolved (fixed in 3.7.2-2.1) sid: resolved (fixed in 3.7.2-2.1) trixie: resolved (fixed in 3.7.2-2.1)

CVE-2007-3645 [MEDIUM] CVE-2007-3645: libarchive - archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assiste... archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (crash) via (1) an end-of-file condition within a tar header that follows a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive, which results in a NULL pointer dereference, a different issue t

CVE-2007-3644 [MEDIUM] CVE-2007-3644: libarchive - archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assiste... archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (infinite loop) via (1) an end-of-file condition within a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive. Scope: local bookworm: resolved (fixed in 2.2.4-1) bullseye: resolved (fixed in 2.