{"schemaVersion":3,"id":"USN-3859-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"libarchive vulnerabilities\n\nIt was discovered that libarchive incorrectly handled certain archive files.\nAn attacker could possibly use this issue to cause a denial of service.\nCVE-2018-1000880 affected only Ubuntu 18.04 LTS and Ubuntu 18.10.\n(CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000880)\n\nIt was discovered that libarchive incorrectly handled certain archive files.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2017-14502)","dates":{"published":"2019-01-15T13:40:36.000Z","modified":"2026-04-22T09:53:41.706Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"libarchive","name":"libarchive","label":"libarchive","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libarchive","purlType":"deb","versions":[{"text":"< 3.1.2-7ubuntu2.7","noFixRecorded":false,"fixedIn":null},{"text":"< 3.1.2-11ubuntu0.16.04.5","noFixRecorded":false,"fixedIn":null},{"text":"< 3.2.2-3.1ubuntu0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.2-7ubuntu2.7 | < 3.1.2-11ubuntu0.16.04.5 | < 3.2.2-3.1ubuntu0.2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3859-1","label":"ubuntu.com/security/notices/USN-3859-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-14502","label":"ubuntu.com/security/CVE-2017-14502","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-1000877","label":"ubuntu.com/security/CVE-2018-1000877","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-1000878","label":"ubuntu.com/security/CVE-2018-1000878","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-1000880","label":"ubuntu.com/security/CVE-2018-1000880","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2017-14502","CVE-2018-1000877","CVE-2018-1000878","CVE-2018-1000880"],"downstream":[],"duplicates":[],"related":["CVE-2017-14502","CVE-2018-1000877","CVE-2018-1000878","CVE-2018-1000880"]},"timeline":[{"kind":"published","date":"2019-01-15T13:40:36.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:53:41.706Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:42:45.157Z","stale":false,"partial":false}}