The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0146 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7070-1 advisory.

    It was discovered that libarchive mishandled certain memory checks, which could result in a NULL pointer     dereference. An attacker could potentially use this issue to cause a denial of service. This issue only     affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
    (CVE-2022-36227)

    It was discovered that libarchive mishandled certain memory operations, which could result in an out-of-     bounds memory access. An attacker could potentially use this issue to cause a denial of service. This     issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-48957, CVE-2024-48958)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0148 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-36227:
    In libarchive before 3.6.2, the software does not check for an error after calling calloc function that     can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
    NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: In     rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it,     then writing or reading memory is possible, which may lead to code execution.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5392:01 advisory.

    * libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5565:02 advisory.

    * libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1519 advisory.

    This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 9.6. It addresses 5 CVEs:
    CVE-2025-5917, CVE-2025-25724, CVE-2013-0211, CVE-2022-26280, CVE-2022-36227.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0012 advisory.

    This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 8.6. It addresses 10 CVEs:
    CVE-2019-1000019, CVE-2019-19221, CVE-2022-36227, CVE-2017-14503, CVE-2021-31566, and 5 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
187896	RHEL 8 : libarchive (RHSA-2024:0146)	Nessus	Red Hat Local Security Checks	1/10/2024	11/7/2024	critical
209121	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : libarchive vulnerabilities (USN-7070-1)	Nessus	Ubuntu Local Security Checks	10/16/2024	9/30/2025	critical
236210	Alibaba Cloud Linux 3 : 0148: libarchive (ALINUX3-SA-2023:0148)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	critical
292137	MiracleLinux 9 : libarchive-3.5.3-4.el9 (AXSA:2023-5392:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	critical
293287	MiracleLinux 8 : libarchive-3.3.3-5.el8 (AXSA:2023-5565:02)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	critical
356014	Rocky Linux 9.6 [CIQ] Security Update: bsdtar / libarchive / libarchive-devel Multiple Vulnerabilities (ciqsa-2026_1519)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	critical
358546	Rocky Linux 8.6 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0012)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/11/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical