- Vulnerability/
- USN-3884-1
USN-3884-1: libarchive vulnerabilities
First published: Thu Feb 07 2019(Updated: )
It was discovered that libarchive incorrectly handled certain 7zip files. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-1000019, CVE-2019-1000020)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libarchive13 | <3.2.2-5ubuntu0.2 | 3.2.2-5ubuntu0.2 |
| Ubuntu Ubuntu | =18.10 | |
| All of | ||
| ubuntu/libarchive13 | <3.2.2-3.1ubuntu0.3 | 3.2.2-3.1ubuntu0.3 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/libarchive13 | <3.1.2-11ubuntu0.16.04.6 | 3.1.2-11ubuntu0.16.04.6 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/libarchive13 | <3.1.2-7ubuntu2.8 | 3.1.2-7ubuntu2.8 |
| Ubuntu Ubuntu | =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-1000019
- https://ubuntu.com/security/CVE-2019-1000020
- https://launchpad.net/ubuntu/+source/libarchive/3.2.2-5ubuntu0.2
- https://launchpad.net/ubuntu/+source/libarchive/3.2.2-3.1ubuntu0.3
- https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.6
- https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.8
- https://ubuntu.com/security/notices/USN-3884-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for these libarchive vulnerabilities?
The vulnerability IDs for these libarchive vulnerabilities are CVE-2019-1000019 and CVE-2019-1000020.
What is the severity level of the libarchive vulnerabilities?
The severity level of the libarchive vulnerabilities is not provided.
How can these libarchive vulnerabilities be exploited?
These libarchive vulnerabilities can be exploited by an attacker to cause a denial of service.
What is the affected software for these libarchive vulnerabilities?
The affected software for these libarchive vulnerabilities is libarchive13 version 3.2.2-5ubuntu0.2 (Ubuntu 18.10), libarchive13 version 3.2.2-3.1ubuntu0.3 (Ubuntu 18.04), libarchive13 version 3.1.2-11ubuntu0.16.04.6 (Ubuntu 16.04), and libarchive13 version 3.1.2-7ubuntu2.8 (Ubuntu 14.04).
How can I fix the libarchive vulnerabilities?
To fix the libarchive vulnerabilities, update libarchive13 to the recommended versions: 3.2.2-5ubuntu0.2 for Ubuntu 18.10, 3.2.2-3.1ubuntu0.3 for Ubuntu 18.04, 3.1.2-11ubuntu0.16.04.6 for Ubuntu 16.04, and 3.1.2-7ubuntu2.8 for Ubuntu 14.04.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/18.10
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04
- version/ubuntu ubuntu/14.04