CVE-2015-8923
published 2016-09-20CVE-2015-8923: The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of…
medium6.5CVSS 3.0
AVNACLPRNUIRSUCNINAH
The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | libarchive | < libarchive 3.2.0-2 (bookworm) | libarchive 3.2.0-2 (bookworm) |
| libarchive | libarchive | <= 3.1.901a | — |
| libarchive | libarchive | >= 0 < 3.2.0-2 | 3.2.0-2 |
| libarchive | libarchive | >= 0 < 3.2.0-2 | 3.2.0-2 |
| libarchive | libarchive | >= 0 < 3.2.0-2 | 3.2.0-2 |
| libarchive | libarchive | >= 0 < 3.2.0-2 | 3.2.0-2 |
| libarchive | libarchive | >= 0 < 3.1.2-7ubuntu2.3 | 3.1.2-7ubuntu2.3 |
| libarchive | libarchive | >= 0 < 3.1.2-11ubuntu0.16.04.2 | 3.1.2-11ubuntu0.16.04.2 |
| novell | suse_linux_enterprise_desktop | — | — |
| novell | suse_linux_enterprise_server | — | — |
| novell | suse_linux_enterprise_software_development_kit | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM