Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

openSUSE-SU-2019:2615-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceopenSUSE-SU-2019:2615-1

openSUSE-SU-2019:2615-1

MEDIUM5.3

Security update for libarchive

Published Dec 3, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for libarchive fixes the following issues:

Security issues fixed:

CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).
CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).
CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).
CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).
CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).

This update was imported from the SUSE:SLE-15:Update update project.

Affected Packages

bsdtar

openSUSE Leap 15.0

Fixed in:

3.3.2-lp150.10.1

libarchive-devel

openSUSE Leap 15.0

Fixed in:

3.3.2-lp150.10.1

libarchive13

openSUSE Leap 15.0

Fixed in:

3.3.2-lp150.10.1

libarchive13-32bit

openSUSE Leap 15.0

Fixed in:

3.3.2-lp150.10.1

References

https://bugzilla.suse.com/1120653

https://bugzilla.suse.com/1120654

https://bugzilla.suse.com/1124341

https://bugzilla.suse.com/1124342

https://bugzilla.suse.com/1155079

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U6XQ3DWFEKK5LGAFI7F4YVSON52JVUJE/#U6XQ3DWFEKK5LGAFI7F4YVSON52JVUJE

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U6XQ3DWFEKK5LGAFI7F4YVSON52JVUJE/#U6XQ3DWFEKK5LGAFI7F4YVSON52JVUJE

https://www.suse.com/security/cve/CVE-2018-1000877/

https://www.suse.com/security/cve/CVE-2018-1000878/

https://www.suse.com/security/cve/CVE-2019-1000019/

https://www.suse.com/security/cve/CVE-2019-1000020/

https://www.suse.com/security/cve/CVE-2019-18408/

https://www.suse.com/support/security/rating/

CVSS Analysis

CVSS v3.0

5.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Upstream

CVE-2018-1000877 CVE-2018-1000878 CVE-2019-1000019 CVE-2019-1000020 CVE-2019-18408

Ecosystems

openSUSE Leap 15.0

Timeline

PublishedDec 3, 2019

ModifiedDec 3, 2019