libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a specially crafted WARC file.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148256 advisory.

    libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards)     contains a CWE-20: Improper Input Validation vulnerability in WARC parser -     libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run     time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a     specially crafted WARC file.(CVE-2018-1000880)

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libarchive package has been released.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libarchive: heap-based buffer overflow in archive_string_append_from_wcs function in archive_string.c     (CVE-2020-21674)

  - libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards)     contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c,     archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the     victim must open a specially crafted archive file. (CVE-2018-1000879)

  - libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards)     contains a CWE-20: Improper Input Validation vulnerability in WARC parser -     libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run     time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a     specially crafted WARC file. (CVE-2018-1000880)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

Security fix for [CVE-2018-1000877 CVE-2018-1000878 CVE-2018-1000879 CVE-2018-1000880]

----

Applied various flaws from upsteam

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libarchive fixes the following issues :

Security issues fixed :

  - CVE-2018-1000877: Fixed a double free vulnerability in     RAR decoder (bsc#1120653)

  - CVE-2018-1000878: Fixed a Use-After-Free vulnerability     in RAR decoder (bsc#1120654)

  - CVE-2018-1000879: Fixed a NULL pointer Dereference     vulnerability in ACL parser (bsc#1120656)

  - CVE-2018-1000880: Fixed an Improper Input Validation     vulnerability in WARC parser (bsc#1120659)

  - CVE-2019-1000019: Fixed an Out-Of-Bounds Read     vulnerability in 7zip decompression (bsc#1124341) 

  - CVE-2019-1000020: Fixed an Infinite Loop vulnerability     in ISO9660 parser (bsc#1124342)

This update was imported from the SUSE:SLE-15:Update update project.

This update for libarchive fixes the following issues :

Security issues fixed :

CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653)

CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654)

CVE-2018-1000879: Fixed a NULL pointer Dereference vulnerability in ACL parser (bsc#1120656)

CVE-2018-1000880: Fixed an Improper Input Validation vulnerability in WARC parser (bsc#1120659)

CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341)

CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3859-1 advisory.

    It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly     use this issue to cause a denial of service. CVE-2018-1000880 affected only Ubuntu 18.04 LTS and Ubuntu     18.10. (CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000880)

    It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly     use this issue to expose sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04     LTS and Ubuntu 18.04 LTS. (CVE-2017-14502)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues were found in libarchive, a multi-format archive and compression library: Processing malformed RAR archives could result in denial of service or the execution of arbitrary code and malformed WARC, LHarc, ISO, Xar or CAB archives could result in denial of service.

ID	Name	Product	Family	Severity
209709	F5 Networks BIG-IP : libarchive vulnerability (K000148256)	Nessus	F5 Networks Local Security Checks	medium
202887	Photon OS 2.0: Libarchive PHSA-2019-2.0-0161	Nessus	PhotonOS Local Security Checks	medium
198940	RHEL 8 : libarchive (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
195601	RHEL 8 : libarchive (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
126114	Photon OS 3.0: Libarchive PHSA-2019-3.0-0015	Nessus	PhotonOS Local Security Checks	medium
124863	Photon OS 1.0: Libarchive PHSA-2019-1.0-0227	Nessus	PhotonOS Local Security Checks	medium
124557	Fedora 30 : libarchive (2019-fbe83d0e32)	Nessus	Fedora Local Security Checks	high
124051	openSUSE Security Update : libarchive (openSUSE-2019-1196)	Nessus	SuSE Local Security Checks	high
123766	Fedora 28 : libarchive (2019-c595a93536)	Nessus	Fedora Local Security Checks	high
123636	SUSE SLED15 / SLES15 Security Update : libarchive (SUSE-SU-2019:0831-1)	Nessus	SuSE Local Security Checks	high
123098	Fedora 29 : libarchive (2019-0233ec0ff3)	Nessus	Fedora Local Security Checks	high
121211	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libarchive vulnerabilities (USN-3859-1)	Nessus	Ubuntu Local Security Checks	high
119893	Debian DSA-4360-1 : libarchive - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2018-1000880

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

high

high

high

high

high

high

high