Oval Definition:oval:com.ubuntu.bionic:def:201714166000
Revision Date:2017-09-06Version:1
Title:CVE-2017-14166 on Ubuntu 18.04 LTS (bionic) - low.
Description:libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-14166
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND NOT While related to the CVE in some way, the 'libarchive' package in bionic is not affected (note: '3.2.2-3.1').
    • BACK