CVE-2015-8934 The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar...
MediumCVSS 5.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libarchive(Debian:12) | < 3.2.1-1 | 3.2.1-1 |
| debian/libarchive(Debian:13) | < 3.2.1-1 | 3.2.1-1 |
| debian/libarchive(Debian:14) | < 3.2.1-1 | 3.2.1-1 |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| libarchive | <= 3.1.901a | No fix listed |
| alpine/libarchive(Alpine:v3.4) | < 3.2.1-r0 | 3.2.1-r0 |
References
- Debian Security Tracker CVE-2015-8934 vendor-advisory
- SUSE-SU-2016:1909 third-party-advisory vendor-advisory
- RHSA-2016:1844 vendor-advisory
- DSA-3657 vendor-advisory
- [oss-security] 20160617 Many invalid memory access issues in libarchive mailing-list third-party-advisory
- [oss-security] 20160617 Re: Many invalid memory access issues in libarchive mailing-list third-party-advisory
- www.oracle.com
- www.oracle.com
- 91409 vdb-entry
- USN-3033-1 third-party-advisory vendor-advisory
- blog.fuzzing-project.org third-party-advisory
- github.com exploit issue-tracking patch third-party-advisory
- GLSA-201701-03 vendor-advisory
- security.alpinelinux.org vendor-advisory