Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-14501

Опубликовано: 17 сент. 2017
Источник: debian

Описание

An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libarchivefixed3.2.2-4.2package
libarchiveno-dsawheezypackage

Примечания

  • https://github.com/libarchive/libarchive/issues/949

  • https://github.com/libarchive/libarchive/commit/f9569c086ff29259c73790db9cbf39fe8fb9d862

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.

CVSS3: 3.3
redhat
больше 8 лет назад

An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.

CVSS3: 6.5
nvd
больше 8 лет назад

An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.

CVSS3: 6.5
github
больше 3 лет назад

An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.

CVSS3: 6.5
fstec
больше 8 лет назад

Уязвимость функции archive_read_format_iso9660_read_header библиотеки libarchive, позволяющая нарушителю получить несанкционированный доступ к информации