PT-2015-7841

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be triggered by an ISO with a directory that is a member of itself. Recommendations For...

PT-2015-7839

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service crash via a crafted rar archive. This is due to a problem in the archive read format rar read data function. Recommendations For...

PT-2015-7840

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted mtree file. This is due to a problem in the process add entry function in archive read support forma...

PT-2015-7830

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference, by providing a crafted RAR file that is a split file in a multivolume RAR...

PT-2015-7842

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to multiple integer overflows in the get time t max and get time t min functions in archive read support format mtree.c. This can be triggered by a crafted mtree file, leading...

PT-2015-7838

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to the readline function in archive read support format mtree.c, which allows remote attackers to cause a denial of service due to invalid read operations. This is triggered b...

PT-2015-7843

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing a crafted tar file. This crafted file triggers an invalid left shift in the compress bidder init...

PT-2015-7831

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by including an invalid character in the name of a cab...

PT-2015-7844

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to an integer overflow in the archive read format tar skip function, which can be triggered by a crafted tar file. This can cause a denial of service, resulting in a crash...

UBUNTU-CVE-2015-8922

The readCodersInfo function in archivereadsupportformat7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted 7z file, related to the 7zfolder struct...

UBUNTU-CVE-2015-8917

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid character in the name of a cab file...

UBUNTU-CVE-2015-8928

The processaddentry function in archivereadsupportformatmtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mtree file...

UBUNTU-CVE-2015-8926

The archivereadformatrarreaddata function in archivereadsupportformatrar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted rar archive...

UBUNTU-CVE-2015-8924

The archivereadformattarreadheader function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tar file...

UBUNTU-CVE-2015-8923

The processextra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service crash via a crafted zip file...

UBUNTU-CVE-2015-8934

The copyfromlzsswindow function in archivereadsupportformatrar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted rar file...

UBUNTU-CVE-2015-8925

The readline function in archivereadsupportformatmtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read via a crafted mtree file, related to newline parsing...

UBUNTU-CVE-2015-8931

Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...

UBUNTU-CVE-2015-8921

The aestrtofflags function in archiveentry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mtree file...

Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression -...