https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:02:30.919313+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2015-8923 Withdrawn: BELL-CVE-2015-8923 — CVE-2015-8923 does not affect BellSoft software 2026-10-02T18:02:31.017841+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2016-04250 cnvd-2016-04250 2026-10-02T18:02:31.017883+00:00 cnvd-2016-04250 https://cve.radiocsirt.org/vuln/euvd-2026-96062 EUVD-2026-96062 2026-10-02T18:02:31.017899+00:00 EUVD-2026-96062 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8923 fkie_cve-2015-8923 2026-10-02T18:02:31.017911+00:00

The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.

 https://cve.radiocsirt.org/vuln/ghsa-h5p5-pgmm-q97w GHSA-h5p5-pgmm-q97w 2026-10-02T18:02:31.017970+00:00

The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.

 https://cve.radiocsirt.org/vuln/gsd-2015-8923 gsd-2015-8923 2026-10-02T18:02:31.018004+00:00 gsd-2015-8923 https://cve.radiocsirt.org/vuln/rhsa-2016:1844 RHSA-2016:1844 — Red Hat Security Advisory: libarchive security update 2026-10-02T18:02:31.018015+00:00

libarchive: NULL pointer access in RAR parser through bsdtar libarchive: NULL pointer access in CAB parser libarchive: Heap out of bounds read in LHA/LZH parser libarchive: Stack out of bounds read in ar parser libarchive: Global out of bounds read in mtree parser libarchive: NULL pointer access in 7z parser libarchive: Unclear crashes in ZIP parser libarchive: Heap out of bounds read in TAR parser libarchive: Unclear invalid memory read in mtree parser libarchive: NULL pointer access in RAR parser libarchive: Heap out of bounds read in mtree parser libarchive: Endless loop in ISO parser libarchive: Undefined behavior (signed integer overflow) in mtree parser libarchive: Undefined behavior / invalid shiftleft in TAR parser libarchive: out of bounds heap read in RAR parser libarchive: zip_read_mac_metadata() heap-based buffer overflow libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo libarchive: Heap buffer overflow in the Rar decompression functionality libarchive: Memory allocate error with symbolic links in cpio archives libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite libarchive: undefined behaviour (integer overflow) in iso parser libarchive: Buffer overflow when writing large iso9660 containers libarchive: Denial of service using a crafted gzip file

 https://cve.radiocsirt.org/vuln/suse-su-2016:1909-1 SUSE-SU-2016:1909-1 — Security update for libarchive 2026-10-02T18:02:31.018071+00:00

Security update for libarchive

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8923 UBUNTU-CVE-2015-8923 2026-10-02T18:02:31.018100+00:00

Affected: Ubuntu:14.04:LTS: libarchive, Ubuntu:16.04:LTS: libarchive

The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.