libarchive 3.3.2
Approved changes feed: RSS · Atom
cpe:2.3:a:libarchive:libarchive:3.3.2:*:*:*:*:*:*:*part: a version: 3.3.2 update: *
| Vendor | Libarchive (c09cb5c4-d86d-52ea-8f70-142deb63c4f4) |
|---|---|
| Product | Libarchive (04daf0c2-7688-5964-9e13-5f548205786c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/vaporoid/libarchive |
purl2cpe | 2026-06-01 10:18:12.934887 |
pkg:deb/debian/libarchive |
purl2cpe | 2026-06-01 10:18:12.934888 |
pkg:deb/ubuntu/libarchive |
purl2cpe | 2026-06-01 10:18:12.934890 |
pkg:github/libarchive/libarchive |
purl2cpe | 2026-06-01 10:18:12.934891 |
pkg:gitlab/redhat/libarchive |
purl2cpe | 2026-06-01 10:18:12.934893 |
pkg:rpm/opensuse/libarchive |
purl2cpe | 2026-06-01 10:18:12.934894 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-14503 |
vulnerable | 2026-06-08 05:08:50.057794 |
Details available
libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.
Published: 2017-09-17T18:00:00.000Z
Updated: 2024-08-05T19:27:40.808Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14502 |
vulnerable | 2026-06-08 05:08:50.057412 |
Details available
read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.
Published: 2017-09-17T18:00:00.000Z
Updated: 2024-08-05T19:27:40.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14501 |
vulnerable | 2026-06-08 05:08:50.057012 |
Details available
An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.
Published: 2017-09-17T18:00:00.000Z
Updated: 2024-08-05T19:27:40.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14166 |
vulnerable | 2026-06-08 05:08:49.434779 |
Details available
libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.
Published: 2017-09-06T18:00:00.000Z
Updated: 2024-08-05T19:20:40.744Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.