CVE-2019-18408

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html
• lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html
• access.redhat.com/errata/RHSA-2020:0203
• access.redhat.com/errata/RHSA-2020:0246
• access.redhat.com/errata/RHSA-2020:0271
• bugs.chromium.org/p/oss-fuzz/issues/detail · Third Party Advisory
• libarchive/libarchive commit b8592ec · Patch
• libarchive/libarchive · Release Notes
• lists.debian.org/debian-lts-announce/2019/10/msg00034.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LZ4VJGTCYEJSDLOEWUUFG6TM4SUPFSY
• seclists.org/bugtraq/2019/Nov/2
• security.gentoo.org/glsa/202003-28
• support.f5.com/csp/article/K52144175
• usn.ubuntu.com/4169-1 · Third Party Advisory
• debian.org/security/2019/dsa-4557

libarchive のその他の脆弱性

• CVE-2025-60753中 5.5An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted…
• CVE-2025-5918中 6.6A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potential…
• CVE-2025-5917中 5.0A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and …
• CVE-2025-5916中 5.6A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing …
• CVE-2025-5915中 6.6A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter blo…