CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

Code injection

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service infinite loop via an ISO with a directory that is a member of itself...

Null pointer dereference

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid character in the name of a cab file...

Null pointer dereference

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

CVE-2015-8930

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service infinite loop via an ISO with a directory that is a member of itself...

CVE-2015-8916

CVE-2015-8916 affects libarchive’s RAR parsing: a NULL pointer dereference can crash the application when encountering a crafted RAR header (split file in multivolume). IBM notes PowerKVM 3.1 is affected; remediation is to update PowerKVM systems (yum update) and apply the 3.1.0.2 update or later...

CVE-2015-8917

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid character in the name of a cab file...

CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

CVE-2015-8930

CVE-2015-8930 affects libarchive’s ISO parser (bsdtar) and can cause a denial-of-service via an infinite loop when opening a crafted ISO with a directory that is a member of itself. The available connected documents show this vulnerability across multiple advisories and platforms, indicating it i...

CVE-2015-8917

CVE-2015-8917 affects libarchive (bsdtar/cab parser). A malformed CAB file name can trigger a NULL pointer dereference, leading to remote denial of service (crash). Affected product: libarchive (CAB parser in bsdtar/libarchive). Root cause: NULL pointer dereference when encountering an invalid CA...

CVE-2015-8930

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service infinite loop via an ISO with a directory that is a member of itself...

libarchive: NULL pointer access in RAR parser through bsdtar

A vulnerability was found in libarchive. A specially crafted RAR file could cause the application dereference a NULL pointer, leading to a crash...

SUSE SLES11 Security Update : bsdtar (SUSE-SU-2016:1939-1)

bsdtar was updated to fix seven security issues. These security issues were fixed : - CVE-2015-8929: Memory leak in tar parser bsc985669. - CVE-2016-4809: Memory allocate error with symbolic links in cpio archives bsc984990. - CVE-2015-8920: Stack out of bounds read in ar parser bsc985675. -...

SUSE-SU-2016:1939-1 Security update for bsdtar

bsdtar was updated to fix seven security issues. These security issues were fixed: - CVE-2015-8929: Memory leak in tar parser bsc985669. - CVE-2016-4809: Memory allocate error with symbolic links in cpio archives bsc984990. - CVE-2015-8920: Stack out of bounds read in ar parser bsc985675. -...

CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

UBUNTU-CVE-2015-8917

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid character in the name of a cab file...

UBUNTU-CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

UBUNTU-CVE-2015-8930

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service infinite loop via an ISO with a directory that is a member of itself...