PT-2015-7905 · Libarchive · Libarchive

Published 2015-05-11 · Updated 2015-05-11

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description An out-of-bounds read flaw was found in the way libarchive processed certain archives. This could allow an attacker to create a specially crafted archive that, when processed by an application using the libarchive library, would cause that application to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2015-0208

Affected Products

Libarchive

References · 4

• https://osv.dev/vulnerability/MGASA-2015-0208 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0208.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=15854 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1216891 · Note