VULN/vuln-ubuntu
1
0 Fork 0
Code Pull Requests Actions Activity
Files
b11ea68500bc027250f00a6270f6fc7f2eb21e6e
vuln-ubuntu/data/osv/usn/USN-3859-1.json
T

327 lines
8.7 KiB
JSON
Raw Blame History

{
"schema_version": "1.7.0",
"id": "USN-3859-1",
"summary": "libarchive vulnerabilities",
"details": "It was discovered that libarchive incorrectly handled certain archive files.\nAn attacker could possibly use this issue to cause a denial of service.\nCVE-2018-1000880 affected only Ubuntu 18.04 LTS and Ubuntu 18.10.\n(CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000880)\n\nIt was discovered that libarchive incorrectly handled certain archive files.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2017-14502)\n",
"aliases": [],
"upstream": [
"UBUNTU-CVE-2017-14502",
"UBUNTU-CVE-2018-1000877",
"UBUNTU-CVE-2018-1000878",
"UBUNTU-CVE-2018-1000880"
],
"related": [],
"published": "2019-01-15T13:40:36Z",
"modified": "2026-04-22T07:36:36Z",
"affected": [
{
"package": {
"ecosystem": "Ubuntu:14.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.1.2-7ubuntu2.7?arch=source&distro=trusty"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.2-7ubuntu2.7"
}
]
}
],
"versions": [
"3.1.2-5ubuntu1",
"3.1.2-7ubuntu1",
"3.1.2-7ubuntu2",
"3.1.2-7ubuntu2.1",
"3.1.2-7ubuntu2.2",
"3.1.2-7ubuntu2.3",
"3.1.2-7ubuntu2.4",
"3.1.2-7ubuntu2.6"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bsdcpio",
"binary_version": "3.1.2-7ubuntu2.7"
},
{
"binary_name": "bsdtar",
"binary_version": "3.1.2-7ubuntu2.7"
},
{
"binary_name": "libarchive13",
"binary_version": "3.1.2-7ubuntu2.7"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:14.04:LTS",
"cves": [
{
"id": "CVE-2017-14502",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "negligible"
}
]
},
{
"id": "CVE-2018-1000877",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2018-1000878",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.1.2-11ubuntu0.16.04.5?arch=source&distro=xenial"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.2-11ubuntu0.16.04.5"
}
]
}
],
"versions": [
"3.1.2-11build1",
"3.1.2-11ubuntu0.16.04.1",
"3.1.2-11ubuntu0.16.04.2",
"3.1.2-11ubuntu0.16.04.3",
"3.1.2-11ubuntu0.16.04.4"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bsdcpio",
"binary_version": "3.1.2-11ubuntu0.16.04.5"
},
{
"binary_name": "bsdtar",
"binary_version": "3.1.2-11ubuntu0.16.04.5"
},
{
"binary_name": "libarchive13",
"binary_version": "3.1.2-11ubuntu0.16.04.5"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:16.04:LTS",
"cves": [
{
"id": "CVE-2017-14502",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "negligible"
}
]
},
{
"id": "CVE-2018-1000877",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2018-1000878",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.2.2-3.1ubuntu0.2?arch=source&distro=bionic"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2.2-3.1ubuntu0.2"
}
]
}
],
"versions": [
"3.2.2-3.1",
"3.2.2-3.1ubuntu0.1"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bsdcpio",
"binary_version": "3.2.2-3.1ubuntu0.2"
},
{
"binary_name": "bsdtar",
"binary_version": "3.2.2-3.1ubuntu0.2"
},
{
"binary_name": "libarchive-tools",
"binary_version": "3.2.2-3.1ubuntu0.2"
},
{
"binary_name": "libarchive13",
"binary_version": "3.2.2-3.1ubuntu0.2"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:18.04:LTS",
"cves": [
{
"id": "CVE-2017-14502",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "negligible"
}
]
},
{
"id": "CVE-2018-1000877",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2018-1000878",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2018-1000880",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
]
}
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-3859-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14502"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-1000877"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-1000878"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-1000880"
}
]
}
View Git Blame Copy Permalink