CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11463

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.4%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2019-11463

Libarchive » Libarchive » Version: N/A

cpe:2.3:a:libarchive:libarchive:-
Libarchive » Libarchive » Version: 2.6.0

cpe:2.3:a:libarchive:libarchive:2.6.0
Libarchive » Libarchive » Version: 2.6.1

cpe:2.3:a:libarchive:libarchive:2.6.1
Libarchive » Libarchive » Version: 2.6.2

cpe:2.3:a:libarchive:libarchive:2.6.2
Libarchive » Libarchive » Version: 2.7.0

cpe:2.3:a:libarchive:libarchive:2.7.0
Libarchive » Libarchive » Version: 2.7.1

cpe:2.3:a:libarchive:libarchive:2.7.1
Libarchive » Libarchive » Version: 2.8.0

cpe:2.3:a:libarchive:libarchive:2.8.0
Libarchive » Libarchive » Version: 2.8.1

cpe:2.3:a:libarchive:libarchive:2.8.1
Libarchive » Libarchive » Version: 2.8.2

cpe:2.3:a:libarchive:libarchive:2.8.2
Libarchive » Libarchive » Version: 2.8.3

cpe:2.3:a:libarchive:libarchive:2.8.3
Libarchive » Libarchive » Version: 2.8.4

cpe:2.3:a:libarchive:libarchive:2.8.4
Libarchive » Libarchive » Version: 2.8.5

cpe:2.3:a:libarchive:libarchive:2.8.5
Libarchive » Libarchive » Version: 3.0.0a

cpe:2.3:a:libarchive:libarchive:3.0.0a
Libarchive » Libarchive » Version: 3.0.1b

cpe:2.3:a:libarchive:libarchive:3.0.1b
Libarchive » Libarchive » Version: 3.0.2

cpe:2.3:a:libarchive:libarchive:3.0.2
Libarchive » Libarchive » Version: 3.0.3

cpe:2.3:a:libarchive:libarchive:3.0.3
Libarchive » Libarchive » Version: 3.0.4

cpe:2.3:a:libarchive:libarchive:3.0.4
Libarchive » Libarchive » Version: 3.1.0

cpe:2.3:a:libarchive:libarchive:3.1.0
Libarchive » Libarchive » Version: 3.1.1

cpe:2.3:a:libarchive:libarchive:3.1.1
Libarchive » Libarchive » Version: 3.1.2

cpe:2.3:a:libarchive:libarchive:3.1.2
Libarchive » Libarchive » Version: 3.1.900a

cpe:2.3:a:libarchive:libarchive:3.1.900a
Libarchive » Libarchive » Version: 3.1.901a

cpe:2.3:a:libarchive:libarchive:3.1.901a
Libarchive » Libarchive » Version: 3.2.0

cpe:2.3:a:libarchive:libarchive:3.2.0
Libarchive » Libarchive » Version: 3.2.1

cpe:2.3:a:libarchive:libarchive:3.2.1
Libarchive » Libarchive » Version: 3.2.2

cpe:2.3:a:libarchive:libarchive:3.2.2
Libarchive » Libarchive » Version: 3.3.0

cpe:2.3:a:libarchive:libarchive:3.3.0
Libarchive » Libarchive » Version: 3.3.1

cpe:2.3:a:libarchive:libarchive:3.3.1
Libarchive » Libarchive » Version: 3.3.2

cpe:2.3:a:libarchive:libarchive:3.3.2
Libarchive » Libarchive » Version: 3.3.3

cpe:2.3:a:libarchive:libarchive:3.3.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11463

Products

Pricing

Contact Us