CVE-2019-11463

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

• CWE-401

• https://github.com/libarchive/libarchive/commit/ba641f73f3d758d9032b3f0e5597a9c6e593a505Patch, Third Party Advisory
• https://github.com/libarchive/libarchive/issues/1165Exploit, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2019-11463Third Party Advisory
• https://github.com/libarchive/libarchive/commit/ba641f73f3d758d9032b3f0e5597a9c6e593a505Patch, Third Party Advisory
• https://github.com/libarchive/libarchive/issues/1165Exploit, Third Party Advisory

Published

Apr 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11457Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 …8.8
• CVE-2019-11458An issue was discovered in SmtpTransport in CakePHP 3.7.6. A…
• CVE-2019-11459The tiff_document_render() and tiff_document_get_thumbnail()…5.5
• CVE-2019-1146A remote code execution vulnerability exists when the Window…7.8
• CVE-2019-11460An issue was discovered in GNOME gnome-desktop 3.26, 3.28, a…
• CVE-2019-11461An issue was discovered in GNOME Nautilus 3.30 prior to 3.30…
• CVE-2019-11464Some enterprises require that REST API endpoints include sec…6.1
• CVE-2019-11465An issue was discovered in Couchbase Server 5.5.x through 5.…5.3
• CVE-2019-11466In Couchbase Server 6.0.0 and 5.5.0, the eventing service ex…5.3
• CVE-2019-11467In Couchbase Server 4.6.3 and 5.5.0, secondary indexing enco…7.5
• CVE-2019-11469Zoho ManageEngine Applications Manager 12 through 14 allows …
• CVE-2019-1147A remote code execution vulnerability exists when the Window…7.8