PT-2016-4062 · Libarchive+2 · Libarchive+2

Hanno Böck · Publicado 2016-06-29 · Atualizado 2017-07-01 · CVE-2015-8929

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0

Description The issue is related to a memory leak in the archive read get extract function in archive read extract2.c in libarchive. This memory leak allows remote attackers to cause a denial of service via a manipulated tar file.

Recommendations For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1654

CVE-2015-8929

OPENSUSE-SU-2016_2036-1

SUSE-SU-2016:1909-1

SUSE-SU-2016:1939-1

Produtos afetados

Alt Linux

Suse

Libarchive

Referências · 133

• 🔥 https://github.com/libarchive/libarchive/issues/517 · Exploit
• https://github.com/libarchive/libarchive/issues/746 · Nota
• https://github.com/libarchive/libarchive/issues/521 · Nota
• https://github.com/libarchive/libarchive/issues/518 · Nota
• https://github.com/libarchive/libarchive/issues/717 · Nota
• https://github.com/libarchive/libarchive/issues/516 · Nota
• https://github.com/libarchive/libarchive/issues/548 · Nota
• https://github.com/libarchive/libarchive/issues/550 · Nota
• https://github.com/libarchive/libarchive/issues/539 · Nota
• https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22 · Nota
• https://github.com/libarchive/libarchive/issues/503 · Nota
• https://github.com/libarchive/libarchive/issues/547 · Nota
• https://github.com/libarchive/libarchive/issues/523 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8934 · Nota de Segurança
• https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f · Nota