CVE-2015-8915

bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read and crash via crafted cpio file...

Design/Logic Flaw

The archivestringappend function in archivestring.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted cab files, related to "overlapping memcpy."...

Code injection

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service infinite loop via an ISO with a directory that is a member of itself...

CVE-2015-8927

The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...

UBUNTU-CVE-2015-8915

bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read and crash via crafted cpio file...

CVE-2015-8915

bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read and crash via crafted cpio file...

UBUNTU-CVE-2015-8929

Memory leak in the archivereadgetextract function in archivereadextract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file...

Out-of-bounds

The arreadheader function in archivereadsupportformatar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds stack read via a crafted ar file...

Design/Logic Flaw

The processextra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service crash via a crafted zip file...

Code injection

bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read and crash via crafted cpio file...

Integer overflow

Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...

Design/Logic Flaw

The readline function in archivereadsupportformatmtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read via a crafted mtree file, related to newline parsing...

UBUNTU-CVE-2015-8927

The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...

Null pointer dereference

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

CVE-2015-8924

CVE-2015-8924 affects libarchive’s TAR parser: archive_read_format_tar_read_header allows an out-of-bounds read when processing a crafted tar file, potentially enabling denial of service. The vulnerability exists in libarchive before version 3.2.0. Public advisories indicate multiple vendors have...

CVE-2015-8924

The archivereadformattarreadheader function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tar file...

CVE-2015-8923

CVE-2015-8923 affects libarchive via a vulnerability in the ZIP parser where process_extra uses a size field and a signed offset, enabling a remote attacker to crash the application with a crafted ZIP file. Affected versions referenced include libarchive before 3.2.0. Remediation is to upgrade to...

CVE-2015-8918

The archivestringappend function in archivestring.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted cab files, related to "overlapping memcpy."...

CVE-2015-8919

The lhareadfileextendedheader function in archivereadsupportformatlha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap via a crafted 1 lzh or 2 lha file...

CVE-2015-8929

CVE-2015-8929 is a memory-leak vulnerability in libarchive’s tar parser (function __archive_read_get_extract in archive_read_extract2.c) that could allow a remote attacker to cause a denial of service by processing a crafted tar file, unless fixed. Public sources in connected documents confirm th...