CVE-2015-8924
published 2016-09-20CVE-2015-8924: The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
medium5.5CVSS 3.0
AVLACLPRNUIRSUCNINAH
The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | libarchive | < libarchive 3.2.0-2 (bookworm) | libarchive 3.2.0-2 (bookworm) |
| libarchive | libarchive | <= 3.1.901a | — |
| libarchive | libarchive | >= 0 < 3.2.0-2 | 3.2.0-2 |
| libarchive | libarchive | >= 0 < 3.2.0-2 | 3.2.0-2 |
| libarchive | libarchive | >= 0 < 3.2.0-2 | 3.2.0-2 |
| libarchive | libarchive | >= 0 < 3.2.0-2 | 3.2.0-2 |
| libarchive | libarchive | >= 0 < 3.1.2-7ubuntu2.3 | 3.1.2-7ubuntu2.3 |
| libarchive | libarchive | >= 0 < 3.1.2-11ubuntu0.16.04.2 | 3.1.2-11ubuntu0.16.04.2 |
| novell | suse_linux_enterprise_desktop | — | — |
| novell | suse_linux_enterprise_server | — | — |
| novell | suse_linux_enterprise_software_development_kit | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM