PT-2015-7887 · Libarchive · Libarchive

Published 2015-03-12 · Updated 2015-03-12

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description The issue is related to a directory traversal vulnerability via absolute paths in the bsdcpio program, which is part of the libarchive project. This was discovered by Alexander Cherepanov.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2015-0106

Affected Products

Libarchive

References · 5

• https://debian.org/security/2015/dsa-3180 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0106.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0106 · Vendor Advisory
• http://openwall.com/lists/oss-security/2015/01/16/7 · Note
• https://bugs.mageia.org/show_bug.cgi?id=15438 · Note