CVE-2015-8922

MEDIUM · 5.5 CVSS Gepubliceerd: 20-09-2016 CWE-476

Beschrijving

The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.

Vendors

Libarchive Novell Canonical Oracle

Affected products

Libarchive Suse Linux Enterprise Software Development Kit Suse Linux Enterprise Desktop Suse Linux Enterprise Server Ubuntu Linux Linux

References

lists.opensuse.org
rhn.redhat.com
www.debian.org
www.openwall.com
www.openwall.com
www.oracle.com
www.securityfocus.com
www.ubuntu.com
blog.fuzzing-project.org
github.com
security.gentoo.org
www.suse.com