PT-2015-7887 · Libarchive · Libarchive

Publicado 2015-03-12 · Atualizado 2015-03-12

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description The issue is related to a directory traversal vulnerability via absolute paths in the bsdcpio program, which is part of the libarchive project. This was discovered by Alexander Cherepanov.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0106

Produtos afetados

Libarchive

Referências · 5

• https://debian.org/security/2015/dsa-3180 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/01/16/7 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=15438 · Nota
• https://advisories.mageia.org/MGASA-2015-0106.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2015-0106 · Aviso do Fabricante