445
VMScore

CVE-2017-14502

Published: 17/09/2017 Updated: 03/10/2019
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libarchive libarchive 3.3.2

Vendor Advisories

Several security issues were fixed in libarchive ...
Multiple security issues were found in libarchive, a multi-format archive and compression library: Processing malformed RAR archives could result in denial of service or the execution of arbitrary code and malformed WARC, LHarc, ISO, Xar or CAB archives could result in denial of service For the stable distribution (stretch), these problems have be ...
Synopsis Moderate: OpenShift Container Platform 4103 security update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4103 is now available withupdates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impact of ...
Synopsis Important: Service Telemetry Framework 14 security update Type/Severity Security Advisory: Important Topic An update is now available for Service Telemetry Framework 14 for RHEL 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which g ...
Debian Bug report logs - #916963 libarchive: CVE-2018-1000878 Package: src:libarchive; Maintainer for src:libarchive is Peter Pentchev <roam@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 20 Dec 2018 20:42:02 UTC Severity: grave Tags: security, upstream Found in versions libarchive/32 ...
Debian Bug report logs - #916960 libarchive: CVE-2018-1000880 Package: src:libarchive; Maintainer for src:libarchive is Peter Pentchev <roam@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 20 Dec 2018 20:27:01 UTC Severity: important Tags: security, upstream Found in versions libarchive ...
Debian Bug report logs - #875974 libarchive: CVE-2017-14502: out-of-bounds read in archive_read_format_rar_read_header() Package: src:libarchive; Maintainer for src:libarchive is Peter Pentchev <roam@debianorg>; Reported by: Jakub Wilk <jwilk@jwilknet> Date: Sat, 16 Sep 2017 18:15:01 UTC Severity: normal Tags: fixe ...
Debian Bug report logs - #916964 libarchive: CVE-2018-1000877 Package: src:libarchive; Maintainer for src:libarchive is Peter Pentchev <roam@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 20 Dec 2018 20:48:02 UTC Severity: important Tags: security, upstream Found in versions libarchive ...
Debian Bug report logs - #875960 libarchive: CVE-2017-14503: out-of-bounds read in lha_read_data_none() Package: src:libarchive; Maintainer for src:libarchive is Peter Pentchev <roam@debianorg>; Reported by: Jakub Wilk <jwilk@jwilknet> Date: Sat, 16 Sep 2017 15:09:01 UTC Severity: normal Tags: security, upstream F ...
read_header in archive_read_support_format_rarc in libarchive 332 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header ...