MGASA-2019-0030

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2019-0030.html
Import Source
https://advisories.mageia.org/MGASA-2019-0030.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2019-0030
Upstream
Published
2019-01-11T05:54:06Z
Modified
2026-04-16T06:25:35Z
Summary
Updated libarchive packages fix security vulnerabilities
Details

read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header (CVE-2017-14502).

Multiple security issues were found in libarchive: Processing malformed RAR archives could result in denial of service or the execution of arbitrary code and malformed WARC, LHarc, ISO, Xar or CAB archives could result in denial of service (CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000879, CVE-2018-1000880).

References
Credits

Affected packages

Mageia:6 / libarchive

Package

Name
libarchive
Purl
pkg:rpm/mageia/libarchive?arch=source&distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.1-1.4.mga6

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2019-0030.json"