CVE-2015-8926

Опубликовано: 17 июн. 2016

Источник: redhat

CVSS3: 3.7

CVSS2: 3.5

Описание

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

A vulnerability was found in libarchive. A specially crafted RAR file could cause the application to disclose a 128k block of memory from an uncontrolled location.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	libarchive	Not affected
Red Hat Enterprise Linux 7	libarchive	Fixed	RHSA-2016:1844	12.09.2016

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-228->CWE-125

https://bugzilla.redhat.com/show_bug.cgi?id=1348424libarchive: NULL pointer access in RAR parser

3.7 Low

CVSS3

3.5 Low

CVSS2

Связанные уязвимости

CVE-2015-8926

CVSS3: 5.5

ubuntu

почти 9 лет назад

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

CVE-2015-8926

CVSS3: 5.5

nvd

почти 9 лет назад

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

CVE-2015-8926

CVSS3: 5.5

debian

почти 9 лет назад

The archive_read_format_rar_read_data function in archive_read_support ...

GHSA-55xq-cfx2-8gpg

CVSS3: 5.5

github

около 3 лет назад

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

openSUSE-SU-2016:2036-1

suse-cvrf

почти 9 лет назад

Security update for libarchive

3.7 Low

CVSS3

3.5 Low

CVSS2