CVE-2015-8931

Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...

CVE-2015-8922

The readCodersInfo function in archivereadsupportformat7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted 7z file, related to the 7zfolder struct...

PT-2015-7838

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to the readline function in archive read support format mtree.c, which allows remote attackers to cause a denial of service due to invalid read operations. This is triggered b...

PT-2015-7844

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to an integer overflow in the archive read format tar skip function, which can be triggered by a crafted tar file. This can cause a denial of service, resulting in a crash...

PT-2015-7841

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be triggered by an ISO with a directory that is a member of itself. Recommendations For...

PT-2015-7843

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing a crafted tar file. This crafted file triggers an invalid left shift in the compress bidder init...

PT-2015-7840

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted mtree file. This is due to a problem in the process add entry function in archive read support forma...

PT-2015-7842

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to multiple integer overflows in the get time t max and get time t min functions in archive read support format mtree.c. This can be triggered by a crafted mtree file, leading...

PT-2015-7839

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service crash via a crafted rar archive. This is due to a problem in the archive read format rar read data function. Recommendations For...

UBUNTU-CVE-2015-8931

Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...

CVE-2015-8921

The aestrtofflags function in archiveentry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mtree file...

CVE-2015-8919

The lhareadfileextendedheader function in archivereadsupportformatlha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap via a crafted 1 lzh or 2 lha file...

PT-2015-7845

Name of the Vulnerable Software and Affected Versions libarchive versions 3.2.0 and earlier Description The issue allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted rar file. Recommendations For libarchive versions 3.2.0 and earlier, update to a version lat...

UBUNTU-CVE-2015-8925

The readline function in archivereadsupportformatmtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read via a crafted mtree file, related to newline parsing...

UBUNTU-CVE-2015-8933

Integer overflow in the archivereadformattarskip function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file...

PT-2015-7830

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference, by providing a crafted RAR file that is a split file in a multivolume RAR...

CVE-2015-8926

The archivereadformatrarreaddata function in archivereadsupportformatrar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted rar archive...

CVE-2015-8924

The archivereadformattarreadheader function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tar file...

CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

CVE-2015-8925

The readline function in archivereadsupportformatmtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service invalid read via a crafted mtree file, related to newline parsing...