libarchive: Multiple vulnerabilities (CVE-2017-14501, CVE-2017-14502, CVE-2017-14503)| ID: oval:org.secpod.oval:def:59752 | Date: (C)2019-11-20 (M)2023-12-20 |
| Class: PATCH | Family: unix |
An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.References:
| Platform: |
| Alpine Linux 3.8 |
| Alpine Linux 3.9 |
| Alpine Linux 3.7 |
