F5-K000148255

First published: Fri Oct 25 2024(Updated: )

CVE-2019-1000020 libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file. CVE-2019-1000019 libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/f5-advisory
• source/F5
• alias/CVE-2019-1000020
• alias/CVE-2019-1000019
• agent/software-canonical-lookup
• agent/severity
• agent/references
• agent/last-modified-date
• agent/type
• agent/description
• agent/softwarecombine
• agent/first-publish-date
• agent/event
• agent/tags
• agent/trending
• vendor/f5
• canonical/f5 big-ip
• version/f5 big-ip/17.1.0
• version/f5 big-ip/17.1.1
• version/f5 big-ip/16.1.0
• version/f5 big-ip/16.1.5
• version/f5 big-ip/15.1.0
• version/f5 big-ip/15.1.10