CVE-2017-14166

概要

参考情報

• blogs.gentoo.org/ago/2017/09/06/libarchive-heap-based-buffer-overflow-in-xml_data-archive_read_support_format_xar-c · Patch
• libarchive/libarchive commit fa7438a · Patch
• lists.debian.org/debian-lts-announce/2018/11/msg00037.html · Mailing List
• security.gentoo.org/glsa/201908-11
• usn.ubuntu.com/3736-1 · Third Party Advisory
• debian.org/security/2018/dsa-4360 · Third Party Advisory

libarchive のその他の脆弱性

• CVE-2025-60753中 5.5An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted…
• CVE-2025-5918中 6.6A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potential…
• CVE-2025-5917中 5.0A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and …
• CVE-2025-5916中 5.6A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing …
• CVE-2025-5915中 6.6A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter blo…