Lucene search
Veracode Vulnerability DatabaseVERACODE:6074HistoryApr 10, 2018 - 7:43 a.m.
Undefined Behavior Through Integer Overflow
2018-04-1007:43:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.005 Low
EPSS
Percentile
75.8%
libarchive.so is vulnerable to undefined behavior through integer overflow. The vulnerability is possible due to not properly handling time_t value of m, allowing the attacker to pass malicious .mtree file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libarchive.so | eq | 2.8.3 |
Related
debiancve
debiancve
CVE-2015-8931
2016-09-20 14:15:18
cvelist
cvelist
CVE-2015-8931
2016-09-20 14:00:00
redhatcve
redhatcve
CVE-2015-8931
2016-06-22 06:19:17
cve
cve
CVE-2015-8931
2016-09-20 14:15:18
prion
prion
Integer overflow
2016-09-20 14:15:00
nvd
nvd
CVE-2015-8931
2016-09-20 14:15:18
ubuntucve
ubuntucve
CVE-2015-8931
2015-12-31 00:00:00
debian
debian
[SECURITY] [DLA 554-1] libarchive security update
2016-07-21 06:10:45
[SECURITY] [DSA 3657-1] libarchive security update
2016-08-30 21:15:15
nessus
nessus
Debian DLA-554-1 : libarchive security update
2016-07-22 00:00:00
SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2016:1909-1)
2016-08-29 00:00:00
openSUSE Security Update : libarchive (openSUSE-2016-969)
2016-08-16 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-554-1)
2023-03-08 00:00:00
openSUSE: Security Advisory for libarchive (openSUSE-SU-2016:2036-1)
2016-08-12 00:00:00
Debian Security Advisory DSA 3657-1 (libarchive - security update)
2016-09-07 00:00:00
suse
suse
Security update for libarchive (important)
2016-08-11 17:13:38
Security update for libarchive (important)
2016-07-29 14:09:01
ubuntu
ubuntu
libarchive vulnerabilities
2016-07-14 00:00:00
cloudfoundry
cloudfoundry
USN-3033-1 libarchive vulnerability | Cloud Foundry
2016-08-25 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in libarchive affect PowerKVM
2018-06-18 01:33:29
redhat
redhat
(RHSA-2016:1844) Important: libarchive security update
2016-09-12 15:10:21
amazon
amazon
Important: libarchive
2016-09-27 10:30:00
centos
centos
bsdcpio, bsdtar, libarchive security update
2016-09-16 00:18:58
oraclelinux
oraclelinux
libarchive security update
2016-09-12 00:00:00
gentoo
gentoo
libarchive: Multiple vulnerabilities
2017-01-01 00:00:00