Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-8920

Опубликовано: 17 июн. 2016
Источник: redhat
CVSS3: 3.7
CVSS2: 3.5
EPSS Низкий

Описание

The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.

A vulnerability was found in libarchive. A specially crafted AR archive could cause the application to read a single byte of application memory, potentially disclosing it to the attacker.

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1348416libarchive: Stack out of bounds read in ar parser

EPSS

Процентиль: 78%
0.01917
Низкий

3.7 Low

CVSS3

3.5 Low

CVSS2

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 10 лет назад

The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.

CVSS3: 5.5
nvd
почти 10 лет назад

The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.

CVSS3: 5.5
debian
почти 10 лет назад

The _ar_read_header function in archive_read_support_format_ar.c in li ...

CVSS3: 5.5
github
около 4 лет назад

The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.

suse-cvrf
почти 10 лет назад

Security update for bsdtar

EPSS

Процентиль: 78%
0.01917
Низкий

3.7 Low

CVSS3

3.5 Low

CVSS2