libarchive vulnerabilities

Known vulnerabilities in the libarchive package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Link Following	<3.2.2-2+deb9u3
H Link Following	<3.2.2-2+deb9u3
M Out-of-bounds Read	<3.2.2-2+deb9u3
H Use After Free	<3.2.2-2+deb9u2
M Loop with Unreachable Exit Condition ('Infinite Loop')	<3.2.2-2+deb9u2
M Out-of-bounds Read	<3.2.2-2+deb9u2
H Use After Free	<3.2.2-2+deb9u1
H Double Free	<3.2.2-2+deb9u1
M Out-of-Bounds	<3.2.2-2+deb9u1
H Out-of-bounds Read	<3.2.2-2+deb9u1
M Out-of-bounds Read	<3.2.2-2+deb9u1
M Out-of-bounds Read	<3.2.2-2+deb9u1
M Out-of-bounds Read	<3.2.2-2+deb9u1
M Out-of-Bounds	<3.2.2-2+deb9u1
M Out-of-Bounds	<3.2.2-2+deb9u1
M NULL Pointer Dereference	<3.2.2-2+deb9u1
H Out-of-Bounds	<3.2.1-5
M Out-of-bounds Read	<3.2.1-5
H Out-of-bounds Read	<3.2.1-5
H Out-of-bounds Read	<3.2.1-6
H Improper Input Validation	<3.2.1-4
H Out-of-Bounds	<3.2.1-1
M Resource Management Errors	<3.2.0-2
M Integer Overflow or Wraparound	<3.2.1-1
L Integer Overflow or Wraparound	<3.2.1-1
H Integer Overflow or Wraparound	<3.2.1-1
H Improper Input Validation	<3.2.1-1
H Out-of-Bounds	<3.2.1-1
M Out-of-bounds Read	<3.2.0-2
M Out-of-bounds Read	<3.2.0-2
M Out-of-bounds Read	<3.2.1-1
M Out-of-bounds Read	<3.2.0-2
M Out-of-Bounds	<3.2.0-2
M Improper Input Validation	<3.2.0-2
M Improper Input Validation	<3.2.0-2
H Improper Input Validation	<3.2.0-2
M Integer Overflow or Wraparound	<3.2.0-2
H NULL Pointer Dereference	<3.2.0-2
M Out-of-bounds Read	<3.2.0-2
M NULL Pointer Dereference	<3.2.0-2
L Out-of-bounds Read	<3.2.0-2
H Out-of-Bounds	<3.2.0-2
H Out-of-bounds Read	<3.2.0-2
H Integer Overflow or Wraparound	<3.2.0-2
M NULL Pointer Dereference	<3.2.0-2
M Out-of-bounds Read	<3.2.0-2
M NULL Pointer Dereference	<3.2.0-2
H Improper Input Validation	<3.1.2-11.1
M Directory Traversal	<3.1.2-11
M Numeric Errors	<3.0.4-3
H Resource Management Errors	<3.0.4-2
H Out-of-Bounds	<3.0.4-2
M Out-of-Bounds	<2.8.5-5
M Out-of-Bounds	<2.8.5-5
L CVE-2007-3645	<2.2.4-1
L CVE-2007-3641	<2.2.4-1
L CVE-2007-3644	<2.2.4-1
L CVE-2006-5680	<1.3.1-1

Vulnerability

Vulnerable Version

<3.2.2-2+deb9u3

<3.2.2-2+deb9u3

<3.2.2-2+deb9u3

<3.2.2-2+deb9u2

Loop with Unreachable Exit Condition ('Infinite Loop')

<3.2.2-2+deb9u2