CVE-2015-8922

CVE-2015-8922 affects libarchive where the read_CodersInfo function in archive_read_support_format_7zip.c can dereference a NULL pointer when parsing a crafted 7z file, causing a denial of service/crash. Affected versions are libarchive before 3.2.0. Root cause involves the _7z_folder struct hand...

CVE-2015-8929

CVE-2015-8929 is a memory-leak vulnerability in libarchive’s tar parser (function __archive_read_get_extract in archive_read_extract2.c) that could allow a remote attacker to cause a denial of service by processing a crafted tar file, unless fixed. Public sources in connected documents confirm th...

CVE-2015-8927

CVE-2015-8927 affects libarchive: the trad_enc_decrypt_update function in archive_read_support_format_zip.c allows a crafted ZIP file to trigger an out-of-bounds heap read, causing a denial of service. This vulnerability is present in libarchive up to version 3.1.x (pre-3.2.0). Several connected ...

CVE-2015-8925

CVE-2015-8925 affects libarchive (before 3.2.0). A denial of service can be triggered by processing a crafted mtree file due to an invalid memory read in read_mtree. Affected products include libarchive in various distributions; remediation is to upgrade to a fixed libarchive version as provided ...

CVE-2015-8919

CVE-2015-8919 affects libarchive prior to 3.2.0, where the lha_read_file_extended_header path in archive_read_support_format_lha.c is exploitable via crafted LHA/LZH files. This causes an out-of-bounds read which can overflow the heap, enabling a remote attacker to crash the application and poten...

CVE-2015-8933

CVE-2015-8933 is a Libarchive vulnerability: an integer overflow in archive_read_support_format_tar_skip() within archive_read_format_tar.c, affecting Libarchive prior to 3.2.0. This can allow a remote attacker to crash a target via a crafted tar file (DoS). The connected Nessus/EulerOS entries c...

CVE-2015-8915

bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read and crash via crafted cpio file...

CVE-2015-8923

The processextra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service crash via a crafted zip file...

CVE-2015-8924

The archivereadformattarreadheader function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tar file...

CVE-2015-8919

The lhareadfileextendedheader function in archivereadsupportformatlha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap via a crafted 1 lzh or 2 lha file...

CVE-2015-8917

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid character in the name of a cab file...

CVE-2015-8922

The readCodersInfo function in archivereadsupportformat7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted 7z file, related to the 7zfolder struct...

CVE-2015-8925

The readline function in archivereadsupportformatmtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read via a crafted mtree file, related to newline parsing...

CVE-2015-8928

CVE-2015-8928 affects libarchive MTREE parser: an out-of-bounds read in process_add_entry() when processing a crafted mtree file. Impact is denial of service and potential information disclosure. Affected upstream: libarchive before 3.2.0. Remediation: upgrade to 3.2.0 or later where fixed. Other...

CVE-2015-8926

The archivereadformatrarreaddata function in archivereadsupportformatrar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted rar archive...

CVE-2015-8915

CVE-2015-8915 : In libarchive, the bsdcpio component is affected by an invalid read in the cpio handling when using versions prior to 3.2.0, which can cause a denial of service (crash) on processing crafted cpio archives. The connected documents confirm this vulnerability is tied to libarchive’s ...

CVE-2015-8927

The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...

CVE-2015-8917

CVE-2015-8917 affects libarchive (bsdtar/cab parser). A malformed CAB file name can trigger a NULL pointer dereference, leading to remote denial of service (crash). Affected product: libarchive (CAB parser in bsdtar/libarchive). Root cause: NULL pointer dereference when encountering an invalid CA...

CVE-2015-8923

CVE-2015-8923 affects libarchive via a vulnerability in the ZIP parser where process_extra uses a size field and a signed offset, enabling a remote attacker to crash the application with a crafted ZIP file. Affected versions referenced include libarchive before 3.2.0. Remediation is to upgrade to...

CVE-2015-8933

Integer overflow in the archivereadformattarskip function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file...