vulnerability

SUSE: CVE-2015-8920: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Jul 29, 2016
Added
Jul 29, 2016
Modified
Jun 21, 2021

Description

The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.

Solutions

suse-upgrade-libarchive-develsuse-upgrade-libarchive13suse-upgrade-libarchive2

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.