CVE-2015-8917

Опубликовано: 17 июн. 2016

Источник: redhat

CVSS3: 3.7

CVSS2: 3.5

Описание

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.

A vulnerability was found in libarchive. A specially crafted CAB file could cause the application dereference a NULL pointer, leading to a crash.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	libarchive	Not affected
Red Hat Enterprise Linux 7	libarchive	Fixed	RHSA-2016:1844	12.09.2016

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-228->CWE-476

https://bugzilla.redhat.com/show_bug.cgi?id=1348413libarchive: NULL pointer access in CAB parser

3.7 Low

CVSS3

3.5 Low

CVSS2

Связанные уязвимости

CVE-2015-8917

CVSS3: 7.5

ubuntu

почти 9 лет назад

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.

CVE-2015-8917

CVSS3: 7.5

nvd

почти 9 лет назад

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.

CVE-2015-8917

CVSS3: 7.5

debian

почти 9 лет назад

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a d ...

GHSA-p5x4-pp3w-p9wj

CVSS3: 7.5

github

около 3 лет назад

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.

ELSA-2016-1844

oracle-oval

почти 9 лет назад

ELSA-2016-1844: libarchive security update (IMPORTANT)

3.7 Low

CVSS3

3.5 Low

CVSS2