- Vulnerability/
- USN-4293-1
USN-4293-1: libarchive vulnerabilities
First published: Mon Mar 02 2020(Updated: )
It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to access sensitive information. (CVE-2019-19221) It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to cause a crash resulting in a denial of service or possibly unspecified other impact. This issue only affected Ubuntu 19.10. (CVE-2020-9308)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libarchive13 | <3.4.0-1ubuntu0.1 | 3.4.0-1ubuntu0.1 |
| =19.10 | ||
| All of | ||
| ubuntu/libarchive13 | <3.2.2-3.1ubuntu0.6 | 3.2.2-3.1ubuntu0.6 |
| =18.04 | ||
| All of | ||
| ubuntu/libarchive13 | <3.1.2-11ubuntu0.16.04.8 | 3.1.2-11ubuntu0.16.04.8 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-19221
- https://ubuntu.com/security/CVE-2020-9308
- https://launchpad.net/ubuntu/+source/libarchive/3.4.0-1ubuntu0.1
- https://launchpad.net/ubuntu/+source/libarchive/3.2.2-3.1ubuntu0.6
- https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.8
- https://ubuntu.com/security/notices/USN-4293-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is CVE-2019-19221.
How does the vulnerability in libarchive affect security?
The vulnerability in libarchive could allow an attacker to access sensitive information.
Which versions of libarchive are affected by this vulnerability?
Versions 3.4.0-1ubuntu0.1, 3.2.2-3.1ubuntu0.6, and 3.1.2-11ubuntu0.16.04.8 of libarchive are affected by this vulnerability.
Is there a fix for this vulnerability?
Yes, the remediation for this vulnerability is to update to version 3.4.0-1ubuntu0.1 of libarchive.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Ubuntu Security website and the CVE-2019-19221 reference.
- agent/references
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/softwarecombine
- agent/title
- agent/description
- agent/event
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/trending
- agent/tags
- agent/source
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04