CVE-2019-18408

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html
• lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html
• access.redhat.com/errata/RHSA-2020:0203
• access.redhat.com/errata/RHSA-2020:0246
• access.redhat.com/errata/RHSA-2020:0271
• bugs.chromium.org/p/oss-fuzz/issues/detail · Third Party Advisory
• libarchive/libarchive commit b8592ec · Patch
• libarchive/libarchive · Release Notes
• lists.debian.org/debian-lts-announce/2019/10/msg00034.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LZ4VJGTCYEJSDLOEWUUFG6TM4SUPFSY
• seclists.org/bugtraq/2019/Nov/2

Más vulnerabilidades de libarchive

• CVE-2025-60753MEDIO 5.5An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted…
• CVE-2025-5918MEDIO 6.6A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potential…
• CVE-2025-5917MEDIO 5.0A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and …
• CVE-2025-5916MEDIO 5.6A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing …
• CVE-2025-5915MEDIO 6.6A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter blo…