libarchive vulnerabilities

Known vulnerabilities in the libarchive package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Use After Free	<0:3.1.2-14.15.amzn1
M Double Free	<0:3.1.2-12.12.amzn1
M Out-of-bounds Read	<0:3.1.2-12.12.amzn1
M Use After Free	<0:3.1.2-12.12.amzn1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:3.1.2-12.12.amzn1
M Out-of-bounds Read	<0:3.1.2-12.12.amzn1
H Integer Overflow or Wraparound	<0:3.1.2-10.11.amzn1
H Improper Input Validation	<0:3.1.2-10.11.amzn1
H Incorrect Calculation	<0:3.1.2-10.11.amzn1
H Out-of-bounds Read	<0:3.1.2-10.11.amzn1
H Improper Input Validation	<0:3.1.2-10.11.amzn1
H Integer Overflow or Wraparound	<0:3.1.2-10.11.amzn1
H Heap-based Buffer Overflow	<0:3.1.2-10.11.amzn1
H Improper Input Validation	<0:3.1.2-10.11.amzn1
H Resource Management Errors	<0:3.1.2-10.11.amzn1
H Allocation of Resources Without Limits or Throttling	<0:3.1.2-10.11.amzn1
H Integer Overflow or Wraparound	<0:3.1.2-10.11.amzn1
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.11.amzn1
H NULL Pointer Dereference	<0:3.1.2-10.11.amzn1
H Out-of-bounds Read	<0:3.1.2-10.11.amzn1
H Out-of-bounds Read	<0:3.1.2-10.11.amzn1
H Integer Overflow or Wraparound	<0:3.1.2-10.11.amzn1
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.11.amzn1
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.11.amzn1
H Improper Input Validation	<0:3.1.2-10.11.amzn1
H Out-of-bounds Read	<0:3.1.2-10.11.amzn1
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.11.amzn1
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.11.amzn1
H Out-of-Bounds	<0:3.1.2-10.11.amzn1

Vulnerability

Vulnerable Version

<0:3.1.2-14.15.amzn1

<0:3.1.2-12.12.amzn1

<0:3.1.2-12.12.amzn1

<0:3.1.2-12.12.amzn1

Loop with Unreachable Exit Condition ('Infinite Loop')

<0:3.1.2-12.12.amzn1