Lucene search
+L

2568 matches found

NVD
NVD
•added 2016/09/20 2:15 p.m.•30 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS6AI score0.02214EPSS
SaveExploits1References13
OSV
OSV
•added 2016/09/20 2:15 p.m.•17 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS7.3AI score
SaveExploits0References18
Prion
Prion
•added 2016/09/20 2:15 p.m.•30 views

Design/Logic Flaw

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

4.3CVSS6.8AI score0.02214EPSS
SaveExploits1References13Affected Software6
Cvelist
Cvelist
•added 2016/09/20 2:00 p.m.•41 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

6AI score0.02214EPSS
SaveExploits1References13
CVE
CVE
•added 2016/09/20 2:00 p.m.•132 views

CVE-2015-8932

The CVE-2015-8932 issue affects the libarchive library, specifically the compress_bidder_init function in archive_read_support_filter_compress.c, before version 3.2.0. A crafted tar file can trigger an invalid left shift, allowing a remote attacker to cause a denial of service (crash). Public ref...

5.5CVSS5.8AI score0.02214EPSS
SaveExploits1References13Affected Software1
Mend
Mend
•added 2016/09/20 2:00 p.m.•1 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

6.8CVSS0.02214EPSS
SaveExploits1References14
Debian CVE
Debian CVE
•added 2016/09/20 2:00 p.m.•56 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS6.3AI score0.02214EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/09/20 12:00 a.m.•4 views

CVE-2015-8932: Improper Input Validation

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS6.8AI score0.02214EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2016/09/12 8:11 p.m.•31 views

libarchive: Undefined behavior / invalid shiftleft in TAR parser

Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...

5.5CVSS5.7AI score0.02214EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2016/09/12 7:54 p.m.•21 views

libarchive: Undefined behavior / invalid shiftleft in TAR parser

Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...

5.5CVSS5.7AI score0.02214EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•14 views

The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.

A one-unit shift error in the isrtsprequestorreply function in the epan/dissectors/packet-rtsp.c file of the RTSP dissector in Wireshark allows malicious actors operating remotely to trigger a service failure abrupt termination of the application’s operation by using a specially crafted packet th...

5CVSS5.5AI score0.03375EPSS
SaveExploits0References3Affected Software1
ThreatPost
ThreatPost
•added 2016/06/22 1:23 p.m.•18 views

Ransomware A Two-Year Nightmare in the Making

The scourge of ransomware over the past two years has been impressive – and not in a good way. The number of frustrated computer users locked out of their PCs is at an all-time high with no signs of the ransomware epidemic relenting. According to security experts, the last two years have seen an...

0.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2016/06/22 6:19 a.m.•44 views

CVE-2015-8932

Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...

5.5CVSS2.7AI score0.02214EPSS
SaveExploits1References1
CNVD
CNVD
•added 2016/06/21 12:00 a.m.•8 views

libarchive TAR Parser Unauthorized Operation Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's TAR parser. An attacker can exploit this vulnerability to perform an undefined operation, resulting in an invalid left shift...

5.5CVSS6.9AI score0.02214EPSS
SaveExploits1References1
OSV
OSV
•added 2016/05/05 1:59 a.m.•14 views

DEBIAN-CVE-2000-1254

crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...

7.5CVSS7.7AI score0.03137EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2016/05/05 1:00 a.m.•38 views

CVE-2000-1254

crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...

7.5CVSS8.5AI score0.03137EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2016/05/05 12:00 a.m.•1 views

PT-2016-3457

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.6 Description The issue arises from mishandled C bitwise-shift operations that exceed the size of an expression in OpenSSL, making it easier for remote attackers to defeat cryptographic protection mechanisms. This...

7.5CVSS0.03137EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/05 12:00 a.m.•7 views

CVE-2000-1254: Undefined Security Weakness

crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...

7.5CVSS7.4AI score0.03137EPSS
SaveExploits0References2
hackapp
hackapp
•added 2016/04/01 10:10 a.m.•20 views

Asylum Night Shift DEMO - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Asylum Night Shift DEMO published at the 'play' market has multiple vulnerabilities...

1.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:59 a.m.•15 views

Shift Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Shift Free published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder