The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3033-1 advisory.

    Hanno Bck discovered that libarchive contained multiple security issues when processing certain     malformed archive files. A remote attacker could use this issue to cause libarchive to crash, resulting in     a denial of service, or possibly execute arbitrary code. (CVE-2015-8916, CVE-2015-8917 CVE-2015-8919,     CVE-2015-8920, CVE-2015-8921, CVE-2015-8922, CVE-2015-8923, CVE-2015-8924, CVE-2015-8925, CVE-2015-8926,     CVE-2015-8928, CVE-2015-8930, CVE-2015-8931, CVE-2015-8932, CVE-2015-8933, CVE-2015-8934, CVE-2016-5844)

    Marcin Icewall Noga discovered that libarchive contained multiple security issues when processing     certain malformed archive files. A remote attacker could use this issue to cause libarchive to crash,     resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-4300, CVE-2016-4302)

    It was discovered that libarchive incorrectly handled memory allocation with large cpio symlinks. A remote     attacker could use this issue to possibly cause libarchive to crash, resulting in a denial of service.
    (CVE-2016-4809)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for libarchive is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es) :

* A flaw was found in the way libarchive handled hardlink archive entries of non-zero size. Combined with flaws in libarchive's file system sandboxing, this issue could cause an application using libarchive to overwrite arbitrary files with arbitrary data from the archive. (CVE-2016-5418)

* Multiple out-of-bounds read flaws were found in libarchive.
Specially crafted AR or MTREE files could cause the application to read data out of bounds, potentially disclosing a small amount of application memory, or causing an application crash. (CVE-2015-8920, CVE-2015-8921)

* A denial of service vulnerability was found in libarchive's handling of GZIP streams. A crafted GZIP file could cause libarchive to allocate an excessive amount of memory, eventually leading to a crash.
(CVE-2016-7166)

* A denial of service vulnerability was found in libarchive. A specially crafted CPIO archive containing a symbolic link to a large target path could cause memory allocation to fail, causing an application using libarchive that attempted to view or extract such archive to crash. (CVE-2016-4809)

* Multiple instances of undefined behavior due to arithmetic overflow were found in libarchive. Specially crafted Compress streams or ISO9660 volumes could potentially cause the application to fail to read the archive, or to crash. (CVE-2015-8932, CVE-2016-5844)

Red Hat would like to thank Insomnia Security for reporting CVE-2016-5418.

Security Fix(es) :

  - A flaw was found in the way libarchive handled hardlink     archive entries of non-zero size. Combined with flaws in     libarchive's file system sandboxing, this issue could     cause an application using libarchive to overwrite     arbitrary files with arbitrary data from the archive.
    (CVE-2016-5418)

  - Multiple out-of-bounds write flaws were found in     libarchive. Specially crafted ZIP, 7ZIP, or RAR files     could cause a heap overflow, potentially allowing code     execution in the context of the application using     libarchive. (CVE-2016-1541, CVE-2016-4300,     CVE-2016-4302)

  - Multiple out-of-bounds read flaws were found in     libarchive. Specially crafted LZA/LZH, AR, MTREE, ZIP,     TAR, or RAR files could cause the application to read     data out of bounds, potentially disclosing a small     amount of application memory, or causing an application     crash. (CVE-2015-8919, CVE-2015-8920, CVE-2015-8921,     CVE-2015-8923, CVE-2015-8924, CVE-2015-8925,     CVE-2015-8926, CVE-2015-8928, CVE-2015-8934)

  - Multiple NULL pointer dereference flaws were found in     libarchive. Specially crafted RAR, CAB, or 7ZIP files     could cause an application using libarchive to crash.
    (CVE-2015-8916, CVE-2015-8917, CVE-2015-8922)

  - Multiple infinite loop / resource exhaustion flaws were     found in libarchive. Specially crafted GZIP or ISO files     could cause the application to consume an excessive     amount of resources, eventually leading to a crash on     memory exhaustion. (CVE-2016-7166, CVE-2015-8930)

  - A denial of service vulnerability was found in     libarchive. A specially crafted CPIO archive containing     a symbolic link to a large target path could cause     memory allocation to fail, causing an application using     libarchive that attempted to view or extract such     archive to crash. (CVE-2016-4809)

  - An integer overflow flaw, leading to a buffer overflow,     was found in libarchive's construction of ISO9660     volumes. Attempting to create an ISO9660 volume with 2     GB or 4 GB file names could cause the application to     attempt to allocate 20 GB of memory. If this were to     succeed, it could lead to an out of bounds write on the     heap and potential code execution. (CVE-2016-6250)

  - Multiple instances of undefined behavior due to     arithmetic overflow were found in libarchive. Specially     crafted MTREE archives, Compress streams, or ISO9660     volumes could potentially cause the application to fail     to read the archive, or to crash. (CVE-2015-8931,     CVE-2015-8932, CVE-2016-5844)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in libarchive. A specially     crafted MTREE file could cause a small out-of-bounds     read, potentially disclosing a small amount of     application memory.(CVE-2015-8925)

  - A vulnerability was found in libarchive. An attempt to     create an ISO9660 volume with 2GB or 4GB filenames     could cause the application to crash.(CVE-2016-6250)

  - A vulnerability was found in libarchive. A specially     crafted RAR file could cause the application to read     memory beyond the end of the decompression     buffer.(CVE-2015-8934)

  - A vulnerability was found in libarchive's handling of     7zip data. A specially crafted 7zip file can cause a     integer overflow resulting in memory corruption that     can lead to code execution.(CVE-2016-4300)

  - A vulnerability was found in libarchive. A specially     crafted 7Z file could trigger a NULL pointer     dereference, causing the application to     crash.(CVE-2015-8922)

  - Undefined behavior (signed integer overflow) was     discovered in libarchive, in the ISO parser. A crafted     file could potentially cause denial of     service.(CVE-2016-5844)

  - A vulnerability was found in libarchive. A specially     crafted AR archive could cause the application to read     a single byte of application memory, potentially     disclosing it to the attacker.(CVE-2015-8920)

  - A vulnerability was found in libarchive. A specially     crafted mtree file could cause libarchive to read     beyond a statically declared structure, potentially     disclosing application memory.(CVE-2015-8921)

  - A vulnerability was found in libarchive. A specially     crafted LZA/LZH file could cause a small out-of-bounds     read, potentially disclosing a few bytes of application     memory.(CVE-2015-8919)

  - A vulnerability was found in libarchive. A specially     crafted ISO file could cause the application to consume     resources until it hit a memory limit, leading to a     crash or denial of service.(CVE-2015-8930)

  - A vulnerability was found in libarchive. A specially     crafted TAR file could trigger an out-of-bounds read,     potentially causing the application to disclose a small     amount of application memory.(CVE-2015-8924)

  - A vulnerability was found in libarchive. A specially     crafted MTREE file could cause a limited out-of-bounds     read, potentially disclosing contents of application     memory.(CVE-2015-8928)

  - A vulnerability was found in libarchive. A specially     crafted CAB file could cause the application     dereference a NULL pointer, leading to a     crash.(CVE-2015-8917)

  - A vulnerability was found in libarchive. A specially     crafted RAR file could cause the application     dereference a NULL pointer, leading to a     crash.(CVE-2015-8916)

  - A vulnerability was found in libarchive's handling of     RAR archives. A specially crafted RAR file can cause a     heap overflow, potentially leading to code execution in     the context of the application.(CVE-2016-4302)

  - Undefined behavior (invalid left shift) was discovered     in libarchive, in how Compress streams are identified.
    This could cause certain files to be mistakenly     identified as Compress archives and fail to     read.(CVE-2015-8932)

  - A vulnerability was found in libarchive. A specially     crafted gzip file can cause libarchive to allocate     memory without limit, eventually leading to a     crash.(CVE-2016-7166)

  - Undefined behavior (signed integer overflow) was     discovered in libarchive, in the MTREE parser's     calculation of maximum and minimum dates. A crafted     mtree file could potentially cause denial of     service.(CVE-2015-8931)

  - A flaw was found in the way libarchive handled hardlink     archive entries of non-zero size. Combined with flaws     in libarchive's file system sandboxing, this issue     could cause an application using libarchive to     overwrite arbitrary files with arbitrary data from the     archive.(CVE-2016-5418)

  - Integer signedness error in the archive_write_zip_data     function in archive_write_set_format_zip.c in     libarchive 3.1.2 and earlier, when running on 64-bit     machines, allows context-dependent attackers to cause a     denial of service (crash) via unspecified vectors,     which triggers an improper conversion between unsigned     and signed types, leading to a buffer     overflow.(CVE-2013-0211)

  - A vulnerability was found in libarchive. A specially     crafted zip file can provide an incorrect compressed     size, which may allow an attacker to place arbitrary     code on the heap and execute it in the context of the     application.(CVE-2016-1541)

  - A vulnerability was found in libarchive. A specially     crafted cpio archive containing a symbolic link to a     ridiculously large target path can cause memory     allocation to fail, resulting in any attempt to view or     extract the archive crashing.(CVE-2016-4809)

  - A vulnerability was found in libarchive. A specially     crafted ZIP file could cause a few bytes of application     memory in a 256-byte region to be     disclosed.(CVE-2015-8923)

  - A vulnerability was found in libarchive. A specially     crafted RAR file could cause the application to     disclose a 128k block of memory from an uncontrolled     location.(CVE-2015-8926)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libarchive 已更新，修复了 20 个安全问题。

修复了这些安全问题：

- CVE-2015-8918：CAB 解析器中的重叠 memcpy (bsc#985698)。

- CVE-2015-8919：LHA/LZH 解析器中的越界读取 (bsc#985697)。

- CVE-2015-8920：ar 解析器中的堆栈越界读取 (bsc#985675)。

- CVE-2015-8921：mtree 解析器中的全局越界读取 (bsc#985682)。

- CVE-2015-8922：7z 解析器中的空指针访问 (bsc#985685)。

- CVE-2015-8923：ZIP 解析器中的不明损坏 (bsc#985703)。

- CVE-2015-8924：tar 中的堆缓冲区读取溢出 (bsc#985609)。

- CVE-2015-8925：mtree 解析器中不明的无效内存读取 (bsc#985706)。

- CVE-2015-8926：RAR 解析器中的空指针访问 (bsc#985704)。

- CVE-2015-8928：mtree 解析器中的堆越界读取 (bsc#985679)。

- CVE-2015-8929：tar 解析器中的内存泄漏 (bsc#985669)。

- CVE-2015-8930：ISO 解析器中的无限循环 (bsc#985700)。

- CVE-2015-8931：mtree 解析器中的不明行为/带正负号的整数溢出 (bsc#985689)。

- CVE-2015-8932：压缩处理程序左移大于 int 大小 (bsc#985665)。

- CVE-2015-8933：TAR 解析器中的不明行为/带正负号的整数溢出 (bsc#985688)。

- CVE-2015-8934：RAR 中的越界读取问题 (bsc#985673)。

- CVE-2016-4300：7zip read_SubStreamsInfo 中的堆缓冲区溢出漏洞 (bsc#985832)。

- CVE-2016-4301：mtree parse_device 中有基于堆栈的缓冲区溢出 (bsc#985826)。

- CVE-2016-4302：Rar 解压缩功能中的堆缓冲区溢出 (bsc#985835)。

- CVE-2016-4809：cpio 存档中符号链接的内存分配错误 (bsc#984990)。

此更新从 SUSE:SLE-12:Update 更新项目导入。

Hanno Boeck 和 Marcin Noga 在 libarchive 中发现多种漏洞；处理畸形存档可能导致拒绝服务或执行任意代码。

远程 Oracle Linux 6 主机上安装的程序包受到 ELSA-2016-1850 公告中提及的多个漏洞的影响。

    - 修复 的变体 CVE-2016-5418硬链接可在其路径中包含“..”。
    - 修复 CVE-2016-5418缺陷类型 1硬链接的存档条目造成文件覆盖 (#1365774)

Tenable 已直接从 Oracle Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机受到 GLSA-201701-03 中所述漏洞的影响（libarchive：多个漏洞）在 libarchive 中发现多个漏洞。请检查下面引用的 CVE 标识符以了解详细信息。影响：远程攻击者可引诱用户打开特别构建的存档文件，这可能导致以进程权限执行任意代码或拒绝服务情况。解决方法：目前无任何已知的解决方法。

libarchive 已更新，修正了 20 個安全性問題。

已修正這些安全性問題：

- CVE-2015-8918：CAB 剖析器中的重疊 memcpy 問題(bsc#985698)。

- CVE-2015-8919：LHA/LZH 剖析器中的堆積超出邊界讀取問題 (bsc#985697)。

- CVE-2015-8920：ar 剖析器中的堆疊超出邊界讀取問題 (bsc#985675)。

- CVE-2015-8921：mtree 剖析器中的全域超出邊界讀取問題 (bsc#985682)。

- CVE-2015-8922：7z 剖析器中的 NULL 指標存取問題 (bsc#985685)。

- CVE-2015-8923：ZIP 剖析器中存在不清楚的損毀問題 (bsc#985703)。

- CVE-2015-8924：tar 中的堆積緩衝區讀取溢位問題 (bsc#985609)。

- CVE-2015-8925：mtree 剖析器中不清楚的無效記憶體讀取問題 (bsc#985706)。

- CVE-2015-8926：RAR 剖析器中的 NULL 指標存取問題 (bsc#985704)。

- CVE-2015-8928：mtree 剖析器中的堆積超出邊界讀取問題 (bsc#985679)。

- CVE-2015-8929：tar 剖析器中的記憶體洩漏問題 (bsc#985669).

- CVE-2015-8930：ISO 剖析器中的無限迴圈問題 (bsc#985700)。

- CVE-2015-8931：mtree 剖析器中的未定義行為/帶正負號整數溢位問題 (bsc#985689)。

- CVE-2015-8932：壓縮處置程式左移大於 int 大小問題 (bsc#985665)。

- CVE-2015-8933：TAR 剖析器中的未定義行為/帶正負號整數溢位問題 (bsc#985688)。

- CVE-2015-8934：RAR 中的超出邊界讀取問題 (bsc#985673)。

- CVE-2016-4300：7zip read_SubStreamsInfo 中的堆積緩衝區溢位弱點問題 (bsc#985832)。

- CVE-2016-4301：mtree parse_device 中的堆疊型緩衝區溢位 (bsc#985826)。

- CVE-2016-4302：Rar 解壓縮功能中的堆積緩衝區溢位問題 (bsc#985835)。

- CVE-2016-4809：cpio 封存中符號連結的記憶體配置錯誤問題 (bsc#984990).

此更新是從 SUSE:SLE-12:Update 更新專案匯入。

Hanno Boeck 和 Marcin Noga 在 libarchive 中發現多個弱點；處理格式錯誤的封存可能會導致拒絕服務或執行任意程式碼。

遠端 Oracle Linux 6 主機中安裝的套件受到 ELSA-2016-1850 公告中提及的多個弱點影響。

    - 修正 CVE-2016-5418的變體 硬連結可在其路徑中包含「..」。
    - 修正 CVE-2016-5418含有類型 1 (固定連結) 的封存項目會造成檔案覆寫 (#1365774)

Tenable 已直接從 Oracle Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機受到 GLSA-201701-03 中所述的弱點影響 (libarchive：多個弱點) 在 libarchive 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：遠端攻擊者可引誘使用者開啟特製的封存檔案，並可能藉此以處理程序的權限來執行任意程式碼，或造成拒絕服務情形。因應措施：目前尚無已知的因應措施。

在用於讀取和寫入多種格式封存的程式庫 libarchive 中發現數個弱點。攻擊者可利用這些瑕疵，造成使用 libarchive 程式庫的應用程式拒絕服務 (應用程式損毀)，或可能以執行該應用程式之使用者的權限執行任意程式碼。

針對 Debian 7「Wheezy」，這些問題已在 3.0.4-3+wheezy2 版本中修正。

建議您升級 libarchive 套件。

注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

在 libarchive 處理非零大小之固定連結封存項目的方式中發現一個缺陷。與 libarchive 的檔案系統沙箱中的缺陷結合之後，此問題可造成使用 libarchive 的應用程式以封存中的任意資料覆寫任意檔案。(CVE-2016-5418) 在 libarchive 中發現多個超出邊界寫入缺陷。特製的 ZIP、7ZIP 或 RAR 檔案可造成堆積溢位，可能允許在使用 libarchive 的應用程式內容中執行程式碼。(CVE-2016-1541、CVE-2016-4300、CVE-2016-4302) 在 libarchive 中發現多個超出邊界讀取缺陷。特製的 LZA/LZH、AR、MTREE、ZIP、TAR 或 RAR 檔案可造成應用程式讀取超出邊界資料，進而可能洩漏少量的應用程式記憶體，或造成應用程式損毀。(CVE-2015-8919、CVE-2015-8920、CVE-2015-8921、CVE-2015-8923、CVE-2015-8924、CVE-2015-8925、CVE-2015-8926、CVE-2015-8928、CVE-2015-8934) 在 libarchive 中發現多個 NULL 指標解除參照缺陷。特製的 RAR、CAB 或 7ZIP 檔案可造成使用 libarchive 的應用程式損毀。(CVE-2015-8916、CVE-2015-8917、CVE-2015-8922) 在 libarchive 中發現多個無限迴圈 / 資源耗盡缺陷。特製 GZIP 或 ISO 檔案可造成應用程式消耗過量的資源，最終導致因記憶體耗盡而損毀。(CVE-2016-7166、CVE-2015-8930) 在 libarchive 中發現一個拒絕服務弱點。包含對於大型目標路徑之符號連結的特製 CPIO 封存可造成記憶體配置失敗，進而造成使用 libarchive 且嘗試檢視或擷取此類封存的應用程式損毀。(CVE-2016-4809) 在 libarchive 的 ISO9660 磁碟區建構中發現一個整數溢位缺陷，其可導致緩衝區溢位。嘗試以 2 GB 或 4 GB 檔案名稱建立 ISO9660 磁碟區可造成應用程式嘗試配置 20 GB 的記憶體。如果成功，這可對堆積導致超出邊界寫入及可能執行程式碼。(CVE-2016-6250) 在 libarchive 中發現因算術溢位而發生未定義行為的多個執行個體。特製 MTREE 封存、壓縮資料流或 ISO9660 磁碟區可能造成應用程式無法讀取封存，或損毀。(CVE-2015-8931、CVE-2015-8932、CVE-2016-5844)

libarchive 已更新，修正了 20 個安全性問題。已修正這些安全性問題：

- CVE-2015-8918：CAB 剖析器中的重疊 memcpy 問題(bsc#985698)。

- CVE-2015-8919：LHA/LZH 剖析器中的堆積超出邊界讀取問題 (bsc#985697)。

- CVE-2015-8920：ar 剖析器中的堆疊超出邊界讀取問題 (bsc#985675)。

- CVE-2015-8921：mtree 剖析器中的全域超出邊界讀取問題 (bsc#985682)。

- CVE-2015-8922：7z 剖析器中的 NULL 指標存取問題 (bsc#985685)。

- CVE-2015-8923：ZIP 剖析器中存在不清楚的損毀問題 (bsc#985703)。

- CVE-2015-8924：tar 中的堆積緩衝區讀取溢位問題 (bsc#985609)。

- CVE-2015-8925：mtree 剖析器中不清楚的無效記憶體讀取問題 (bsc#985706)。

- CVE-2015-8926：RAR 剖析器中的 NULL 指標存取問題 (bsc#985704)。

- CVE-2015-8928：mtree 剖析器中的堆積超出邊界讀取問題 (bsc#985679)。

- CVE-2015-8929：tar 剖析器中的記憶體洩漏問題 (bsc#985669).

- CVE-2015-8930：ISO 剖析器中的無限迴圈問題 (bsc#985700)。

- CVE-2015-8931：mtree 剖析器中的未定義行為/帶正負號整數溢位問題 (bsc#985689)。

- CVE-2015-8932：壓縮處置程式左移大於 int 大小問題 (bsc#985665)。

- CVE-2015-8933：TAR 剖析器中的未定義行為/帶正負號整數溢位問題 (bsc#985688)。

- CVE-2015-8934：RAR 中的超出邊界讀取問題 (bsc#985673)。

- CVE-2016-4300：7zip read_SubStreamsInfo 中的堆積緩衝區溢位弱點問題 (bsc#985832)。

- CVE-2016-4301：mtree parse_device 中的堆疊緩衝區溢位 (bsc#985826)。

- CVE-2016-4302：Rar 解壓縮功能中的堆積緩衝區溢位問題 (bsc#985835)。

- CVE-2016-4809：cpio 封存中符號連結的記憶體配置錯誤問題 (bsc#984990).

請注意，Tenable Network Security 已直接從 SUSE 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

現已提供適用於 Red Hat Enterprise Linux 6 的 libarchive 更新。Red Hat 產品安全性團隊已將此更新評等為具有重要安全性影響。可從〈參照〉一節的 CVE 連結中取得每個弱點之常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。Libarchive 程式設計庫可以建立和讀取數個不同的資料流封存格式，包括 GNU tar、cpio 和 ISO 9660 CD-ROM 影像。Libarchive 特別會在 bsdtar 公用程式、例如 python-libarchive 之類的指令碼語言繫結，以及數個受歡迎的桌面檔案管理程式中使用。安全性修正：* 在 libarchive 處理非零大小之固定連結封存項目的方式中發現一個缺陷。與 libarchive 的檔案系統沙箱中的缺陷結合之後，此問題可造成使用 libarchive 的應用程式以封存中的任意資料覆寫任意檔案。(CVE-2016-5418) * 在 libarchive 中發現多個超出邊界讀取缺陷。特製的 AR 或 MTREE 檔案可造成應用程式讀取超出邊界資料，進而可能洩漏少量的應用程式記憶體，或造成應用程式損毀。(CVE-2015-8920、CVE-2015-8921) * 在 libarchive 的 GZIP 資料流處理中發現一個拒絕服務弱點。特製 GZIP 檔案可造成 libarchive 配置過量的記憶體，最終導致損毀。(CVE-2016-7166) * 在 libarchive 中發現一個拒絕服務弱點。包含對於大型目標路徑之符號連結的特製 CPIO 封存可造成記憶體配置失敗，進而造成使用 libarchive 且嘗試檢視或擷取此類封存的應用程式損毀。(CVE-2016-4809) * 在 libarchive 中發現因算術溢位而發生未定義行為的多個執行個體。特製壓縮資料流或 ISO9660 磁碟區可能造成應用程式無法讀取封存，或損毀。(CVE-2015-8932、CVE-2016-5844) Red Hat 感謝 Insomnia Security 報告 CVE-2016-5418。

ID	名稱	產品	系列	已發布	已更新	嚴重性
92312	Ubuntu 14.04 LTS / 16.04 LTS : libarchive vulnerabilities (USN-3033-1)	Nessus	Ubuntu Local Security Checks	2016/7/15	2024/8/27	high
93451	RHEL 6 : libarchive (RHSA-2016:1850)	Nessus	Red Hat Local Security Checks	2016/9/13	2019/10/24	high
93454	Scientific Linux Security Update : libarchive on SL7.x x86_64 (20160912)	Nessus	Scientific Linux Local Security Checks	2016/9/13	2021/1/14	high
124794	EulerOS Virtualization 3.0.1.0 : libarchive (EulerOS-SA-2019-1470)	Nessus	Huawei Local Security Checks	2019/5/13	2024/5/23	high
92975	openSUSE 安全更新：libarchive (openSUSE-2016-969)	Nessus	SuSE Local Security Checks	2016/8/16	2021/1/19	high
93238	Debian DSA-3657-1：libarchive - 安全更新	Nessus	Debian Local Security Checks	2016/8/31	2021/1/11	high
93447	Oracle Linux 6：libarchive (ELSA-2016-1850)	Nessus	Oracle Linux Local Security Checks	2016/9/13	2025/4/29	high
96234	GLSA-201701-03：libarchive：多个漏洞	Nessus	Gentoo Local Security Checks	2017/1/3	2021/1/11	high
92975	openSUSE 安全性更新：libarchive (openSUSE-2016-969)	Nessus	SuSE Local Security Checks	2016/8/16	2021/1/19	high
93238	Debian DSA-3657-1：libarchive - 安全性更新	Nessus	Debian Local Security Checks	2016/8/31	2021/1/11	high
93447	Oracle Linux 6︰libarchive (ELSA-2016-1850)	Nessus	Oracle Linux Local Security Checks	2016/9/13	2025/4/29	high
96234	GLSA-201701-03：libarchive：多個弱點	Nessus	Gentoo Local Security Checks	2017/1/3	2021/1/11	high
92500	Debian DLA-554-1：libarchive 安全性更新	Nessus	Debian Local Security Checks	2016/7/22	2021/1/11	high
93744	Amazon Linux AMI：libarchive (ALAS-2016-743)	Nessus	Amazon Linux Local Security Checks	2016/9/28	2019/7/10	high
93185	SUSE SLED12 / SLES12 安全性更新：libarchive (SUSE-SU-2016:1909-1)	Nessus	SuSE Local Security Checks	2016/8/29	2021/1/6	high
93542	CentOS 6：libarchive (CESA-2016:1850)	Nessus	CentOS Local Security Checks	2016/9/16	2021/1/4	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high