In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libarchive: directory traversal in bsdcpio (CVE-2015-2304)

  - libarchive: Out of bounds read in lha_read_file_header_1() function (CVE-2017-5601)

  - bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and     crash) via crafted cpio file. (CVE-2015-8915)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3202 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

  - An improper link resolution flaw while extracting an archive can lead to changing the access control list     (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would     trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL     of a file on the system and gain more privileges. (CVE-2021-23177)

  - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times,     access control lists, and flags of a file outside of the archive. An attacker may provide a malicious     archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker     may use this flaw to gain more privileges in a system. (CVE-2021-31566)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2987 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

  - An improper link resolution flaw while extracting an archive can lead to changing the access control list     (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would     trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL     of a file on the system and gain more privileges. (CVE-2021-23177)

  - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times,     access control lists, and flags of a file outside of the archive. An attacker may provide a malicious     archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker     may use this flaw to gain more privileges in a system. (CVE-2021-31566)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:4443 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3722-1 advisory.

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has libarchive packages installed that are affected by a vulnerability:

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because     of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4443 advisory.

  - libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c (CVE-2019-19221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4443 advisory.

    [3.3.2-9]
    - Fix out-of-bounds read (CVE-2019-19221) (#1803967)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4443 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c (CVE-2019-19221)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in     archive_string.c has an out-of-bounds read because of     an incorrect mbrtowc or mbtowc call. For example,     bsdtar crashes via a crafted archive.(CVE-2019-19221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in     archive_string.c has an out-of-bounds read because of     an incorrect mbrtowc or mbtowc call. For example,     bsdtar crashes via a crafted archive.(CVE-2019-19221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libarchive package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in     archive_string.c has an out-of-bounds read because of     an incorrect mbrtowc or mbtowc call. For example,     bsdtar crashes via a crafted archive.(CVE-2019-19221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4293-1 advisory.

    It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly     use this issue to access sensitive information. (CVE-2019-19221)

    It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly     use this issue to cause a crash resulting in a denial of service or possibly unspecified other impact.
    This issue only affected Ubuntu 19.10. (CVE-2020-9308)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Libarchive 3.4.0, archive_wstring_append_from_mbs in     archive_string.c has an out-of-bounds read because of     an incorrect mbrtowc or mbtowc call. For example,     bsdtar crashes via a crafted archive.(CVE-2019-19221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the libarchive package has been released.

ID	Name	Product	Family	Severity
198968	RHEL 7 : libarchive (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
195496	RHEL 6 : libarchive (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
168147	Debian DLA-3202-1 : libarchive - LTS security update	Nessus	Debian Local Security Checks	high
160408	Debian DLA-2987-1 : libarchive - LTS security update	Nessus	Debian Local Security Checks	high
157553	AlmaLinux 8 : libarchive (ALSA-2020:4443)	Nessus	Alma Linux Local Security Checks	medium
155578	SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2021:3722-1)	Nessus	SuSE Local Security Checks	medium
147244	NewStart CGSL MAIN 6.02 : libarchive Vulnerability (NS-SA-2021-0079)	Nessus	NewStart CGSL Local Security Checks	medium
146028	CentOS 8 : libarchive (CESA-2020:4443)	Nessus	CentOS Local Security Checks	medium
142743	Oracle Linux 8 : libarchive (ELSA-2020-4443)	Nessus	Oracle Linux Local Security Checks	medium
142385	RHEL 8 : libarchive (RHSA-2020:4443)	Nessus	Red Hat Local Security Checks	medium
142315	EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2020-2354)	Nessus	Huawei Local Security Checks	medium
141692	EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-2231)	Nessus	Huawei Local Security Checks	medium
140868	EulerOS 2.0 SP3 : libarchive (EulerOS-SA-2020-2101)	Nessus	Huawei Local Security Checks	medium
137998	EulerOS Virtualization 3.0.6.0 : libarchive (EulerOS-SA-2020-1779)	Nessus	Huawei Local Security Checks	medium
137025	EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2020-1607)	Nessus	Huawei Local Security Checks	medium
136272	EulerOS Virtualization for ARM 64 3.0.2.0 : libarchive (EulerOS-SA-2020-1569)	Nessus	Huawei Local Security Checks	medium
135149	EulerOS Virtualization for ARM 64 3.0.6.0 : libarchive (EulerOS-SA-2020-1362)	Nessus	Huawei Local Security Checks	medium
134298	Ubuntu 16.04 LTS / 18.04 LTS : libarchive vulnerabilities (USN-4293-1)	Nessus	Ubuntu Local Security Checks	high
133993	EulerOS 2.0 SP8 : libarchive (EulerOS-SA-2020-1159)	Nessus	Huawei Local Security Checks	medium
133688	Photon OS 2.0: Libarchive PHSA-2020-2.0-0207	Nessus	PhotonOS Local Security Checks	medium
133504	Photon OS 3.0: Libarchive PHSA-2020-3.0-0055	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2019-19221

medium

Tenable Plugins

high

critical

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium