CVE-2015-8932

MEDIUM · 5.5 CVSS Gepubliceerd: 20-09-2016 CWE-20

Beschrijving

The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.

Vendors

Canonical Debian Suse Libarchive

Affected products

Ubuntu Linux Debian Linux Linux Enterprise Desktop Linux Enterprise Server Linux Enterprise Software Development Kit Libarchive

References

lists.opensuse.org
rhn.redhat.com
rhn.redhat.com
www.debian.org
www.openwall.com
www.openwall.com
www.oracle.com
www.securityfocus.com
www.ubuntu.com
blog.fuzzing-project.org
github.com
security-tracker.debian.org
security.gentoo.org