In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3202 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

  - An improper link resolution flaw while extracting an archive can lead to changing the access control list     (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would     trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL     of a file on the system and gain more privileges. (CVE-2021-23177)

  - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times,     access control lists, and flags of a file outside of the archive. An attacker may provide a malicious     archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker     may use this flaw to gain more privileges in a system. (CVE-2021-31566)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2987 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

  - An improper link resolution flaw while extracting an archive can lead to changing the access control list     (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would     trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL     of a file on the system and gain more privileges. (CVE-2021-23177)

  - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times,     access control lists, and flags of a file outside of the archive. An attacker may provide a malicious     archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker     may use this flaw to gain more privileges in a system. (CVE-2021-31566)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:4443 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3722-1 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has libarchive packages installed that are affected by a vulnerability:

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4443 advisory.

  - libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4443 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4443 advisory.

  - libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in     archive_string.c has an out-of-bounds read because of     an incorrect mbrtowc or mbtowc call. For example,     bsdtar crashes via a crafted archive.(CVE-2019-19221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in     archive_string.c has an out-of-bounds read because of     an incorrect mbrtowc or mbtowc call. For example,     bsdtar crashes via a crafted archive.(CVE-2019-19221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libarchive package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in     archive_string.c has an out-of-bounds read because of     an incorrect mbrtowc or mbtowc call. For example,     bsdtar crashes via a crafted archive.(CVE-2019-19221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to access sensitive information. (CVE-2019-19221)

It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to cause a crash resulting in a denial of service or possibly unspecified other impact.
This issue only affected Ubuntu 19.10. (CVE-2020-9308).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in     archive_string.c has an out-of-bounds read because of     an incorrect mbrtowc or mbtowc call. For example,     bsdtar crashes via a crafted archive.(CVE-2019-19221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the libarchive package has been released.

ID	Name	Product	Family	Severity
168147	Debian DLA-3202-1 : libarchive - LTS security update	Nessus	Debian Local Security Checks	high
160408	Debian DLA-2987-1 : libarchive - LTS security update	Nessus	Debian Local Security Checks	high
157553	AlmaLinux 8 : libarchive (ALSA-2020:4443)	Nessus	Alma Linux Local Security Checks	medium
155578	SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2021:3722-1)	Nessus	SuSE Local Security Checks	medium
147244	NewStart CGSL MAIN 6.02 : libarchive Vulnerability (NS-SA-2021-0079)	Nessus	NewStart CGSL Local Security Checks	medium
146028	CentOS 8 : libarchive (CESA-2020:4443)	Nessus	CentOS Local Security Checks	medium
142743	Oracle Linux 8 : libarchive (ELSA-2020-4443)	Nessus	Oracle Linux Local Security Checks	medium
142385	RHEL 8 : libarchive (RHSA-2020:4443)	Nessus	Red Hat Local Security Checks	medium
142315	EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2020-2354)	Nessus	Huawei Local Security Checks	medium
141692	EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-2231)	Nessus	Huawei Local Security Checks	medium
140868	EulerOS 2.0 SP3 : libarchive (EulerOS-SA-2020-2101)	Nessus	Huawei Local Security Checks	medium
137998	EulerOS Virtualization 3.0.6.0 : libarchive (EulerOS-SA-2020-1779)	Nessus	Huawei Local Security Checks	medium
137025	EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2020-1607)	Nessus	Huawei Local Security Checks	medium
136272	EulerOS Virtualization for ARM 64 3.0.2.0 : libarchive (EulerOS-SA-2020-1569)	Nessus	Huawei Local Security Checks	medium
135149	EulerOS Virtualization for ARM 64 3.0.6.0 : libarchive (EulerOS-SA-2020-1362)	Nessus	Huawei Local Security Checks	medium
134298	Ubuntu 16.04 LTS / 18.04 LTS : libarchive vulnerabilities (USN-4293-1)	Nessus	Ubuntu Local Security Checks	high
133993	EulerOS 2.0 SP8 : libarchive (EulerOS-SA-2020-1159)	Nessus	Huawei Local Security Checks	medium
133688	Photon OS 2.0: Libarchive PHSA-2020-2.0-0207	Nessus	PhotonOS Local Security Checks	medium
133504	Photon OS 3.0: Libarchive PHSA-2020-3.0-0055	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2019-19221

medium

Tenable Plugins

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium