Lucene search
+L

48 matches found

Mend
Mend
•added 2017/02/15 7:00 p.m.•3 views

CVE-2016-8688

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

6.8CVSS0.0198EPSS
SaveExploits0References13
Debian CVE
Debian CVE
•added 2017/02/15 7:00 p.m.•63 views

CVE-2016-8688

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

5.5CVSS6.3AI score0.0198EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2017/02/15 12:00 a.m.•9 views

UBUNTU-CVE-2016-8688

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

5.5CVSS6.8AI score0.0198EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2016/10/17 1:17 p.m.•36 views

CVE-2016-8688

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

5.5CVSS5.1AI score0.0198EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2016/09/20 2:15 p.m.•10 views

DEBIAN-CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS8.3AI score0.02214EPSS
SaveExploits1References1
Cisco Threats
Cisco Threats
•added 2016/08/18 2:25 p.m.•53 views

Threat Outbreak Alert RuleID24353: Email Messages Distributing Malicious Software on August 18, 2016

Medium Alert ID: 48517 First Published: 2016 August 18 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24353 may contain the following files: Name |...

0.3AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2016/05/27 10:27 p.m.•26 views

Heap-buffer-overflow in uudecode_bidder_bid

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6051005141614592 Fuzzer: libFuzzerlibarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400000deb...

5.7AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2015/12/31 12:00 a.m.•7 views

PT-2015-7843

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing a crafted tar file. This crafted file triggers an invalid left shift in the compress bidder init...

7.8CVSS0.11992EPSS
SaveExploits4References85
Rows per page
Query Builder