CVE-2015-8923
20.09.2016, 14:15
The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libarchive | libarchive | 𝑥 ≤ 3.1.901a |
| novell | suse_linux_enterprise_software_development_kit | 12.0:sp1 |
| novell | suse_linux_enterprise_desktop | 12.0:sp1 |
| novell | suse_linux_enterprise_server | 12.0:sp1 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 15.10 |
| canonical | ubuntu_linux | 16.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References