CVE-2015-8931

Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...

CVE-2015-8917

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid character in the name of a cab file...

CVE-2015-8922

The readCodersInfo function in archivereadsupportformat7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted 7z file, related to the 7zfolder struct...

CVE-2015-8925

The readline function in archivereadsupportformatmtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read via a crafted mtree file, related to newline parsing...

CVE-2015-8928

CVE-2015-8928 affects libarchive MTREE parser: an out-of-bounds read in process_add_entry() when processing a crafted mtree file. Impact is denial of service and potential information disclosure. Affected upstream: libarchive before 3.2.0. Remediation: upgrade to 3.2.0 or later where fixed. Other...

CVE-2015-8926

The archivereadformatrarreaddata function in archivereadsupportformatrar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted rar archive...

CVE-2015-8915

CVE-2015-8915 : In libarchive, the bsdcpio component is affected by an invalid read in the cpio handling when using versions prior to 3.2.0, which can cause a denial of service (crash) on processing crafted cpio archives. The connected documents confirm this vulnerability is tied to libarchive’s ...

CVE-2015-8927

The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...

CVE-2015-8917

CVE-2015-8917 affects libarchive (bsdtar/cab parser). A malformed CAB file name can trigger a NULL pointer dereference, leading to remote denial of service (crash). Affected product: libarchive (CAB parser in bsdtar/libarchive). Root cause: NULL pointer dereference when encountering an invalid CA...

CVE-2015-8923

CVE-2015-8923 affects libarchive via a vulnerability in the ZIP parser where process_extra uses a size field and a signed offset, enabling a remote attacker to crash the application with a crafted ZIP file. Affected versions referenced include libarchive before 3.2.0. Remediation is to upgrade to...

CVE-2015-8933

Integer overflow in the archivereadformattarskip function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file...

CVE-2015-8934

The copyfromlzsswindow function in archivereadsupportformatrar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted rar file...

CVE-2015-8931

CVE-2015-8931 involves multiple integer overflows in libarchive’s mtree support. The vulnerability arises in archive_read_support_format_mtree.c (mtree parser) in libarchive before 3.2.0, potentially allowing a remote attacker to trigger undefined behavior via a crafted mtree file. Connected advi...

CVE-2015-8918

CVE-2015-8918 affects libarchive’s archive_string_append in archive_string.c, with the vulnerability present in versions before 3.2.0. It allows remote attackers to crash the process by supplying crafted CAB files due to an overlapping memcpy condition. The issue is documented across multiple adv...

CVE-2015-8934

The copyfromlzsswindow function in archivereadsupportformatrar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted rar file...

CVE-2015-8918

The archivestringappend function in archivestring.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted cab files, related to "overlapping memcpy."...

CVE-2015-8916

CVE-2015-8916 affects libarchive’s RAR parsing: a NULL pointer dereference can crash the application when encountering a crafted RAR header (split file in multivolume). IBM notes PowerKVM 3.1 is affected; remediation is to update PowerKVM systems (yum update) and apply the 3.1.0.2 update or later...

CVE-2015-8934

CVE-2015-8934 affects libarchive up to version 3.2.0, with a flaw in copy_from_lzss_window inside archive_read_support_format_rar.c that can trigger an out-of-bounds heap read via a crafted RAR file, leading to denial of service. Public advisories from multiple vendors describe this as part of a ...

CVE-2015-8931

Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...

CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...