Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8908 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8909 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8910 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8911 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8912 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8913 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8914 State: PUBLISHED Published: 2016-06-17T15:00:00 Last Updated: 2024-08-06T08:29:22.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address. Additional Analyst Notes: - CVE Program Container: References: - https://review.openstack.org/#/c/310652/ - https://access.redhat.com/errata/RHSA-2016:1473 - http://www.openwall.com/lists/oss-security/2016/06/10/5 - http://www.openwall.com/lists/oss-security/2016/
A-2016:1473 - http://www.openwall.com/lists/oss-security/2016/06/10/5 - http://www.openwall.com/lists/oss-security/2016/06/10/6 - https://security.openstack.org/ossa/OSSA-2016-009.html - https://review.openstack.org/#/c/310648/ - https://bugs.launchpad.net/neutron/+bug/1502933 - https://review.openstack.org/#/c/300233/ - https://access.redhat.com/errata/RHSA-2016:1474
CVE ID: CVE-2015-8915 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:29.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libarchive/libarchive/issues/503 - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.ope
- http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.securityfocus.com/bid/91298
CVE ID: CVE-2015-8916 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:29.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91296 - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarc
.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://security-tracker.debian.org/tracker/CVE-2015-8916 - https://github.com/libarchive/libarchive/issues/504 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8917 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://github.com/libar
ve.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://github.com/libarchive/libarchive/issues/505 - http://www.securityfocus.com/bid/91303 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - https://security-tracker.debian.org/tracker/CVE-2015-8917 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8918 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:29.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to "overlapping memcpy." Additional Analyst Notes: - CVE Program Container: References: - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - https://github.com/libarchive/libarchive/issues/506 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.openwall.com/lists/oss-security/2
ttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.securityfocus.com/bid/91300
CVE ID: CVE-2015-8919 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:29.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap) via a crafted (1) lzh or (2) lha file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91302 - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/tec
l - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - https://github.com/libarchive/libarchive/issues/510 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8920 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91301 - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/
project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - https://github.com/libarchive/libarchive/issues/511 - http://rhn.redhat.com/errata/RHSA-2016-1850.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8921 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/
.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2016-1850.html - https://github.com/libarchive/libarchive/issues/512 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657 - http://www.securityfocus.com/bid/91307
CVE ID: CVE-2015-8922 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:29.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - https://github.com/libarchive/libarchive/issu
zing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - https://github.com/libarchive/libarchive/issues/513 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://www.suse.com/security/cve/CVE-2015-8922.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.securityfocus.com/bid/91312 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8923 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:29.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - https://github.com/libarchive/libarchive/issues/514 - http://www.oracle.com/technetwork
cess-issues-in-libarchive.html - https://github.com/libarchive/libarchive/issues/514 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.securityfocus.com/bid/91309 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8924 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090
id-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/91308 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657 - https://github.com/libarchive/libarchive/issues/515
CVE ID: CVE-2015-8925 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:29.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-30905
d-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://github.com/libarchive/libarchive/issues/516 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.securityfocus.com/bid/91306 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8926 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:31.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - h
cess-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.securityfocus.com/bid/91304 - https://github.com/libarchive/libarchive/issues/518 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8927 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:29.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted zip file, related to reading the password. Additional Analyst Notes: - CVE Program Container: References: - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - https://github.com/libarchive/libarchive/issues/523 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.
ithub.com/libarchive/libarchive/issues/523 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.securityfocus.com/bid/91329 - http://www.openwall.com/lists/oss-security/2016/06/17/5
CVE ID: CVE-2015-8928 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - http://www.securityfocus.com/bid/91337 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/
om/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657 - https://github.com/libarchive/libarchive/issues/550
CVE ID: CVE-2015-8929 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file. Additional Analyst Notes: - CVE Program Container: References: - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.securityfocus.com/bid/91340 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - https://github.com/libarchive/libarchive/issues/517 - http://www.openwall.com/li
curity-announce/2016-07/msg00025.html - https://github.com/libarchive/libarchive/issues/517 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5
CVE ID: CVE-2015-8930 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91339 - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html -
ccess-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - https://github.com/libarchive/libarchive/issues/522 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8931 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/t
tml - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - https://github.com/libarchive/libarchive/issues/539 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - https://security-tracker.debian.org/tracker/CVE-2015-8931 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657 - http://www.securityfocus.com/bid/91338
CVE ID: CVE-2015-8932 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - https://github.com/libarchive/libarchive/issues/547 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http:/
/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/91424 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2016-1850.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security-tracker.debian.org/tracker/CVE-2015-8932 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8933 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91421 - http://www.ubuntu.com/usn/USN-3033-1 - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - https://github.com/libarchive/libarchive/issues/548 - http://lists.opensuse.org/opens
access-issues-in-libarchive.html - https://github.com/libarchive/libarchive/issues/548 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657