The remote host is affected by the vulnerability described in GLSA-201701-03 (libarchive: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libarchive. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted       archive file possibly resulting in the execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Absolute path traversal vulnerability in bsdcpio in     libarchive 3.1.2 and earlier allows remote attackers to     write to arbitrary files via a full pathname in an     archive.(CVE-2015-2304)

  - An out-of-bounds read flaw exists in parse_file_info in     archive_read_support_format_iso9660.c in libarchive     3.3.2 when extracting a specially crafted iso9660 iso     file, related to     archive_read_format_iso9660_read_header.(CVE-2017-14501     )

  - archive_read_format_rar_read_data in     archive_read_support_format_rar.c in libarchive before     3.4.0 has a use-after-free in a certain ARCHIVE_FAILED     situation, related to     Ppmd7_DecodeSymbol.(CVE-2019-18408)

  - bsdcpio in libarchive before 3.2.0 allows remote     attackers to cause a denial of service (invalid read     and crash) via crafted cpio file.(CVE-2015-8915)

  - libarchive 3.3.2 allows remote attackers to cause a     denial of service (xml_data heap-based buffer over-read     and application crash) via a crafted xar archive,     related to the mishandling of empty strings in the     atol8 function in     archive_read_support_format_xar.c.(CVE-2017-14166)

  - libarchive 3.3.2 suffers from an out-of-bounds read     within lha_read_data_none() in     archive_read_support_format_lha.c when extracting a     specially crafted lha archive, related to     lha_crc16.(CVE-2017-14503)

  - The archive_le32dec function in archive_endian.h in     libarchive 3.2.2 allows remote attackers to cause a     denial of service (heap-based buffer over-read and     application crash) via a crafted file.(CVE-2016-10349)

  - The archive_read_format_cab_read_header function in     archive_read_support_format_cab.c in libarchive 3.2.2     allows remote attackers to cause a denial of service     (heap-based buffer over-read and application crash) via     a crafted file.(CVE-2016-10350)

  - The archive_wstring_append_from_mbs function in     archive_string.c in libarchive 3.2.2 allows remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) via a crafted     archive file.(CVE-2016-10209)

  - The mtree bidder in libarchive 3.2.1 does not keep     track of line sizes when extending the read-ahead,     which allows remote attackers to cause a denial of     service (crash) via a crafted file, which triggers an     invalid read in the (1) detect_form or (2) bid_entry     function in     libarchive/archive_read_support_format_mtree.c.(CVE-201     6-8688)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libarchive fixes several issues.

These security issues were fixed :

  - CVE-2016-8687: Buffer overflow when printing a filename     (bsc#1005070).

  - CVE-2016-8689: Heap overflow when reading corrupted 7Zip     files (bsc#1005072).

  - CVE-2016-8688: Use after free because of incorrect     calculation in next_line (bsc#1005076).

  - CVE-2016-5844: Integer overflow in the ISO parser in     libarchive allowed remote attackers to cause a denial of     service (application crash) via a crafted ISO file     (bsc#986566).

  - CVE-2016-6250: Integer overflow in the ISO9660 writer in     libarchive allowed remote attackers to cause a denial of     service (application crash) or execute arbitrary code     via vectors related to verifying filename lengths when     writing an ISO9660 archive, which trigger a buffer     overflow (bsc#989980).

  - CVE-2016-5418: The sandboxing code in libarchive     mishandled hardlink archive entries of non-zero data     size, which might allowed remote attackers to write to     arbitrary files via a crafted archive file (bsc#998677).

This update was imported from the SUSE:SLE-12:Update update project.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
96234	GLSA-201701-03 : libarchive: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/3	2026/1/7	high
132139	EulerOS 2.0 SP3 : libarchive (EulerOS-SA-2019-2604)	Nessus	Huawei Local Security Checks	2019/12/18	2024/4/4	high
95559	openSUSE Security Update : libarchive (openSUSE-2016-1405)	Nessus	SuSE Local Security Checks	2016/12/6	2026/1/15	high

检测

插件搜索

high

high

high