Known vulnerabilities in libarchive (Alpine package)

Vendor: Alpine Linux Development Team
Software: libarchive (Alpine package)
Software CPE: cpe:2.3:o:alpine:libarchive_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 21
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libarchive (Alpine package) libarchive (Alpine package) is affected by 21 known vulnerabilities: 5 high, 11 medium, 5 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25750 - Memory corruption
CVE-2020-9308		 CWE-119 High
No
No
 3.3.3-r2 03.03.2020 SB2020030311
SB2020030312
SB2020031513
and 5 more
#VU22931 - Out-of-bounds read
CVE-2019-19221		 CWE-125 Medium
No
No
 3.3.3-r2 22.11.2019 SB2019112216
SB2020030312
SB2020061710
and 13 more
#VU22332 - Use After Free
CVE-2019-18408		 CWE-416 High
No
No
 3.3.3-r1, 3.4.2-r0 29.10.2019 SB2019102911
SB2019102912
SB2019110110
and 11 more
#VU15955 - Out-of-bounds read
CVE-2017-14503		 CWE-125 Low
No
No
 3.3.3-r0 19.11.2018 SB2017091705
SB2018111908
SB2018111909
and 9 more
#VU15954 - Off-by-one Error
CVE-2017-14502		 CWE-193 Low
No
No
 3.3.3-r0 19.11.2018 SB2017091705
SB2018111908
SB2018111909
and 15 more
#VU15952 - Out-of-bounds read
CVE-2017-14166		 CWE-125 Low
No
No
 3.2.2-r1, 3.2.2-r2 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 7 more
#VU15818 - Out-of-bounds read
CVE-2017-14501		 CWE-125 Low
No
No
 3.3.3-r0 12.11.2018 SB2017091607
SB2017091705
SB2018111908
and 8 more
#VU33268 - Out-of-bounds read
CVE-2017-5601		 CWE-125 Medium
No
No
 3.2.2-r0, 3.2.2-r1 28.01.2017 SB2017012808
SB2017020106
SB2022061550
and 4 more
#VU33066 - Resource Management Errors
CVE-2016-7166		 CWE-399 Low
No
No
 3.2.1-r0 21.09.2016 SB2016092142
SB2016101837
#VU33271 - Data Handling
CVE-2016-5418		 CWE-19 Medium
No
No
 3.2.1-r0 21.09.2016 SB2016092143
SB2016101836
SB2016091248
#VU32265 - Improper input validation
CVE-2016-4809		 CWE-20 Medium
No
No
 3.1.2-r4 21.09.2016 SB2016092140
SB2016080528
#VU32264 - Heap-based Buffer Overflow
CVE-2016-4302		 CWE-122 Medium
No
No
 3.1.2-r4 21.09.2016 SB2016092139
SB2016080527
#VU32266 - Heap-based Buffer Overflow
CVE-2016-4300		 CWE-122 Medium
No
No
 3.2.1-r0 21.09.2016 SB2016092141
SB2016080532
#VU33272 - Out-of-bounds read
CVE-2015-8934		 CWE-125 Medium
No
No
 3.2.1-r0 20.09.2016 SB2016092022
SB2016080531
#VU215 - Memory corruption
CVE-2016-6250		 CWE-119 High
No
No
 3.1.2-r4 26.07.2016 SB2016072608
SB2016080530
SB2016072027
and 3 more
#VU26 - Incorrect Permission Assignment for Critical Resource
CVE-2016-5844		 CWE-732 High
No
No
 3.1.2-r4 27.06.2016 SB2016062701
SB2016080529
#VU33065 - Heap-based Buffer Overflow
CVE-2016-1541		 CWE-122 High
No
No
 3.1.2-r3 07.05.2016 SB2016050701
SB2016053014
SB2016052504
and 3 more
#VU33270 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-2304		 CWE-22 Medium
No
No
 3.1.2-r2, 3.1.2-r3 15.03.2015 SB2015031501
SB2015050502
#VU33797 - Improper input validation
CVE-2013-0211		 CWE-20 Medium
No
No
 3.0.2-r1 01.10.2013 SB2013100106
SB2013042405
SB2014060103
and 1 more
#VU33327 - Memory corruption
CVE-2011-1777		 CWE-119 Medium
No
No
 3.0.2-r0 13.04.2012 SB2012041302
SB2012011009
SB2014060103
and 2 more


Showing elements 1 - 20 out of 21