libarchive: undefined behaviour (integer overflow) in iso parser

Undefined behavior signed integer overflow was discovered in libarchive, in the ISO parser. A crafted file could potentially cause denial of service...

openSUSE Security Update : libarchive (openSUSE-2016-969)

libarchive was updated to fix 20 security issues. These security issues were fixed : - CVE-2015-8918: Overlapping memcpy in CAB parser bsc985698. - CVE-2015-8919: Heap out of bounds read in LHA/LZH parser bsc985697. - CVE-2015-8920: Stack out of bounds read in ar parser bsc985675. - CVE-2015-8921...

CVE-2016-5844

Undefined behavior signed integer overflow was discovered in libarchive, in the ISO parser. A crafted file could potentially cause denial of service...

PT-2016-6712

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.1 Description The issue is related to an integer overflow in the ISO parser, which can be triggered by a crafted ISO file. This can cause a denial of service, resulting in an application crash. Recommendations...

CVE-2016-5844

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file...

libarchive -- multiple vulnerabilities

Hanno Bock and Cisco Talos report: Out of bounds heap read in RAR parser Signed integer overflow in ISO parser TALOS-2016-0152 CVE-2016-4300: 7-Zip readSubStreamsInfo Integer Overflow TALOS-2016-0153 CVE-2016-4301: mtree parsedevice Stack Based Buffer Overflow TALOS-2016-0154 CVE-2016-4302:...

libarchive ISO Parser Infinite Loop Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in the ISO parser of libarchive. An attacker could exploit this vulnerability to cause an infinite loop...