SUSE CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

The vulnerability of the archive_read_format_iso9660_read_header function in the libarchive library allows a hacker to gain unauthorized access to information.

The vulnerability of the archivereadformatiso9660readheader function in the archivereadsupportformatiso9660.c library of the libarchive library is related to reading beyond the allowed boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to informati...

Design/Logic Flaw

libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards version v2.8.0 onwards contains a CWE-835: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in ISO9660 parser, archivereadsupportformatiso9660.c, readCE/parserockridge that can result in DoS by infinite...