{"kind": "product", "path": "vulns/debian-13/libarchive", "name": "libarchive", "product": "libarchive", "ecosystem": "Debian:13", "items": [{"id": "CVE-2026-17591", "noindex": false, "published": "2026-10-16T22:03:40.603Z", "modified": "2026-10-19T21:28:22.621Z", "cvss": 3.6, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L", "severity": "low", "epss": 0.0011, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-17591", "title": "Libarchive: libarchive: use-after-free via aliased mac metadata copy", "description": "A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.", "references": ["https://access.redhat.com/errata/RHSA-2026:77775", "https://access.redhat.com/security/cve/CVE-2026-17591", "https://bugzilla.redhat.com/show_bug.cgi?id=2554209"], "fixes": [], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-16517", "noindex": false, "published": "2026-07-21T22:41:38.128Z", "modified": "2026-09-21T23:39:07.381Z", "cvss": 2.9, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "severity": "low", "epss": 0.00079, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-16517", "title": "Libarchive: libarchive: signed integer overflow in archive_write_zip_header", "description": "A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.", "references": ["https://access.redhat.com/errata/RHSA-2026:43818", "https://access.redhat.com/errata/RHSA-2026:69553", "https://access.redhat.com/security/cve/CVE-2026-16517"], "fixes": [], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-15028", "noindex": false, "published": "2026-07-10T09:55:49.895Z", "modified": "2026-10-09T01:08:12.921Z", "cvss": 3.9, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "severity": "low", "epss": 0.00204, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-15028", "title": "Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header", "description": "A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system.", "references": ["https://access.redhat.com/errata/RHSA-2026:38279", "https://access.redhat.com/errata/RHSA-2026:69553", "https://access.redhat.com/errata/RHSA-2026:79357"], "fixes": [], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-14164", "noindex": false, "published": "2026-06-30T06:29:23.549Z", "modified": "2026-10-14T19:24:49.682Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00792, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14164", "title": "Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()", "description": "A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.", "references": ["https://access.redhat.com/errata/RHSA-2026:30333", "https://access.redhat.com/errata/RHSA-2026:52674", "https://access.redhat.com/errata/RHSA-2026:52675"], "fixes": [], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-5745", "noindex": false, "published": "2026-04-07T14:57:31.587Z", "modified": "2026-09-01T11:44:38.182Z", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00171, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-5745", "title": "Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive", "description": "A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare \"d\" or \"default\" tag without subsequent fields), the function fails to perform adequate validation before advancing the pointer. An attacker can exploit this by providing a maliciously crafted archive, causing an application utilizing the libarchive API (such as bsdtar) to crash, resulting in a Denial of Service (DoS).", "references": ["https://access.redhat.com/errata/RHSA-2026:8944", "https://access.redhat.com/security/cve/CVE-2026-5745", "https://bugzilla.redhat.com/show_bug.cgi?id=2455921"], "fixes": [], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-5121", "noindex": false, "published": "2026-03-30T07:47:28.562Z", "modified": "2026-10-14T19:24:20.226Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.0143, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-5121", "title": "Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing", "description": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.", "references": ["https://access.redhat.com/errata/RHSA-2026:10065", "https://access.redhat.com/errata/RHSA-2026:10097", "https://access.redhat.com/errata/RHSA-2026:11768"], "fixes": ["3.7.4-4+deb13u1"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-4426", "noindex": false, "published": "2026-03-19T13:53:39.318Z", "modified": "2026-09-01T11:59:47.897Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00582, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-4426", "title": "Libarchive: libarchive: denial of service via malformed iso file processing", "description": "A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.", "references": ["https://access.redhat.com/errata/RHSA-2026:8944", "https://access.redhat.com/security/cve/CVE-2026-4426", "https://bugzilla.redhat.com/show_bug.cgi?id=2449010"], "fixes": ["3.7.4-4+deb13u1"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-4424", "noindex": false, "published": "2026-03-19T13:50:27.294Z", "modified": "2026-10-14T19:08:47.014Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.01114, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-4424", "title": "Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing", "description": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.", "references": ["https://access.redhat.com/errata/RHSA-2026:10065", "https://access.redhat.com/errata/RHSA-2026:10097", "https://access.redhat.com/errata/RHSA-2026:11768"], "fixes": ["3.7.4-4+deb13u1"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-4111", "noindex": false, "published": "2026-03-13T11:45:20.653Z", "modified": "2026-10-14T19:10:47.983Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00705, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-4111", "title": "Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive", "description": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.", "references": ["https://access.redhat.com/errata/RHSA-2026:10065", "https://access.redhat.com/errata/RHSA-2026:10081", "https://access.redhat.com/errata/RHSA-2026:10097"], "fixes": ["3.7.4-4+deb13u1"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-60753", "noindex": false, "published": "2025-11-05T00:00:00.000Z", "modified": "2025-11-05T15:44:31.278Z", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00172, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-60753", "title": "CVE-2025-60753", "description": "An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).", "references": ["https://github.com/libarchive/libarchive/issues/2725", "https://github.com/Papya-j/CVE/tree/main/CVE-2025-60753", "https://nvd.nist.gov/vuln/detail/CVE-2025-60753"], "fixes": [], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-5914", "noindex": false, "published": "2025-06-09T19:53:48.923Z", "modified": "2026-10-12T19:53:01.759Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00444, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-5914", "title": "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c", "description": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.", "references": ["https://access.redhat.com/errata/RHSA-2025:14130", "https://access.redhat.com/errata/RHSA-2025:14135", "https://access.redhat.com/errata/RHSA-2025:14137"], "fixes": ["3.7.4-4"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-5918", "noindex": false, "published": "2025-06-09T19:49:13.544Z", "modified": "2026-09-01T12:08:20.689Z", "cvss": 3.9, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "severity": "low", "epss": 0.00377, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-5918", "title": "Libarchive: reading past eof may be triggered for piped file streams", "description": "A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.", "references": ["https://access.redhat.com/security/cve/CVE-2025-5918", "https://bugzilla.redhat.com/show_bug.cgi?id=2370877", "https://github.com/libarchive/libarchive/pull/2584"], "fixes": ["3.7.4-4+deb13u1"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-5917", "noindex": false, "published": "2025-06-09T19:49:13.204Z", "modified": "2026-09-01T12:08:16.993Z", "cvss": 2.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "severity": "low", "epss": 0.00226, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-5917", "title": "Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c", "description": "A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation. This bug affects libarchive versions prior to 3.8.0.", "references": ["https://access.redhat.com/security/cve/CVE-2025-5917", "https://bugzilla.redhat.com/show_bug.cgi?id=2370874", "https://github.com/libarchive/libarchive/pull/2588"], "fixes": ["3.7.4-4"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-5916", "noindex": false, "published": "2025-06-09T19:49:07.620Z", "modified": "2026-09-01T12:08:15.976Z", "cvss": 3.9, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "severity": "low", "epss": 0.00211, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-5916", "title": "Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c", "description": "A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive. This bug affects libarchive versions prior to 3.8.0.", "references": ["https://access.redhat.com/security/cve/CVE-2025-5916", "https://bugzilla.redhat.com/show_bug.cgi?id=2370872", "https://github.com/libarchive/libarchive/pull/2568"], "fixes": ["3.7.4-4"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-5915", "noindex": false, "published": "2025-06-09T19:49:02.143Z", "modified": "2026-09-01T12:08:10.232Z", "cvss": 6.6, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H", "severity": "medium", "epss": 0.00197, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-5915", "title": "Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c", "description": "A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.", "references": ["https://access.redhat.com/security/cve/CVE-2025-5915", "https://bugzilla.redhat.com/show_bug.cgi?id=2370865", "https://github.com/libarchive/libarchive/pull/2599"], "fixes": ["3.7.4-4"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-25724", "noindex": false, "published": "2025-03-02T00:00:00.000Z", "modified": "2025-03-04T19:00:41.262Z", "cvss": 4, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "severity": "medium", "epss": 0.00367, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-25724", "title": "CVE-2025-25724", "description": "list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.", "references": ["https://github.com/Ekkosun/pocs/blob/main/bsdtarbug", "https://github.com/libarchive/libarchive/blob/b439d586f53911c84be5e380445a8a259e19114c/tar/util.c#L751-L752", "https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92"], "fixes": [], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-1632", "noindex": false, "published": "2025-02-24T13:31:08.871Z", "modified": "2025-02-24T14:25:32.542Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00342, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-1632", "title": "libarchive bsdunzip.c list null pointer dereference", "description": "A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "references": ["https://vuldb.com/?id.296619", "https://vuldb.com/?ctiid.296619", "https://vuldb.com/?submit.496460"], "fixes": ["3.7.4-2"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2024-48958", "noindex": false, "published": "2024-10-10T00:00:00.000Z", "modified": "2025-11-03T20:41:07.588Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00552, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-48958", "title": "CVE-2024-48958", "description": "execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.", "references": ["https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5", "https://github.com/libarchive/libarchive/pull/2148", "https://github.com/terrynini/CVE-Reports/tree/main/CVE-2024-48958"], "fixes": ["3.7.2-2.1"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2024-48957", "noindex": false, "published": "2024-10-10T00:00:00.000Z", "modified": "2025-08-29T19:08:51.237Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.0051, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-48957", "title": "CVE-2024-48957", "description": "execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.", "references": ["https://github.com/libarchive/libarchive/pull/2149", "https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5", "https://github.com/terrynini/CVE-Reports/blob/main/CVE-2024-48957/README.md"], "fixes": ["3.7.2-2.1"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}, {"id": "CVE-2024-26256", "noindex": false, "published": "2024-04-09T17:00:12.125Z", "modified": "2025-05-03T00:39:12.298Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "high", "epss": 0.87896, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-26256", "title": "Libarchive Remote Code Execution Vulnerability", "description": "Libarchive Remote Code Execution Vulnerability", "references": ["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256", "https://www.openwall.com/lists/oss-security/2024/06/04/2", "https://github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch"], "fixes": ["3.7.2-2.1"], "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}]}], "total": 85, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 5, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "libarchive", "path": "vulns/debian-13/libarchive", "ecosystem": "Debian:13"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 1, "kev": 0}, "lastmod": "2026-10-19T21:28:22.621Z", "early_advisories": [], "license": "Puedes utilizar libremente la selección de PatchFirst y nuestras aportaciones (prioridades, alertas tempranas, textos, resúmenes y agregados) para tus propios fines, incluido el uso interno de tu empresa. La reventa, la distribución comercial y la creación masiva de réplicas de esta selección o de estas aportaciones requieren un acuerdo escrito con el operador. Siempre que uses o publiques la selección o nuestras aportaciones, cita a PatchFirst (https://patchfirst.dev/vulns/) con este enlace a la página del flujo de tu región. Los registros originales de fuentes abiertas siguen sujetos a sus respectivas licencias y condiciones. Estas condiciones no limitan tus derechos sobre los datos originales, que puedes obtener directamente de esas fuentes.", "terms_url": "https://patchfirst.dev/es/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst selecciona, normaliza y combina los registros; se pueden añadir resúmenes y traducciones. Las noticias incluyen un enlace a la fuente original en cada entrada.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Las licencias de las bases originales varían; consulta el catálogo de fuentes."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Puntuaciones públicas gratuitas; se solicita atribución (FIRST EPSS, puntuaciones generadas por Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}