- Packages tracked
- 38,394
- CVEs found
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Pending
- 700
728 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DLA-2935-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-3119-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-3165-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-3783-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-3893-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-4145-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-483-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-508-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-990-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-1921-1 | debian/expat | expat - denial of service | - | Awaiting approval | Evidence | None recorded |
| DSA-1953-1 | debian/expat | expat - denial of service | - | Awaiting approval | Evidence | None recorded |
| DSA-1953-2 | debian/expat | expat - regression fix | - | Awaiting approval | Evidence | None recorded |
| DSA-2525-1 | debian/expat | expat - several | - | Awaiting approval | Evidence | None recorded |
| DSA-3318-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-3582-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-3597-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-3898-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-4472-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-4530-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-5073-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-5085-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-5085-2 | debian/expat | expat - regression update | - | Awaiting approval | Evidence | None recorded |
| DSA-5236-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-5266-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-5770-1 | debian/expat | expat - security update | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2006-5680 | debian/libarchive | The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2007-3641 | debian/libarchive | archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer when processing a malformed pax extension header, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ( | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2007-3644 | debian/libarchive | archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (infinite loop) via (1) an end-of-file condition within a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2007-3645 | debian/libarchive | archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (crash) via (1) an end-of-file condition within a tar header that follows a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive, | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-4666 | debian/libarchive | Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2011-1777 | debian/libarchive | Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ISO9660 image. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2011-1778 | debian/libarchive | Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TAR archive. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2011-1779 | debian/libarchive | Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted (1) TAR archive or (2) ISO9660 image. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2013-0211 | debian/libarchive | Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion b | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-2304 | debian/libarchive | Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8915 | debian/libarchive | bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8916 | debian/libarchive | bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8917 | debian/libarchive | bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8919 | debian/libarchive | The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap) via a crafted (1) lzh or (2) lha file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8920 | debian/libarchive | The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8921 | debian/libarchive | The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8922 | debian/libarchive | The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8923 | debian/libarchive | The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8924 | debian/libarchive | The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8925 | debian/libarchive | The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8926 | debian/libarchive | The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8927 | debian/libarchive | The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted zip file, related to reading the password. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8928 | debian/libarchive | The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8929 | debian/libarchive | Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2015-8930 | debian/libarchive | bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself. | - | Awaiting approval | Evidence | None recorded |