Vulnerability Manager Plus

SUSE-SU-2016:2911-1(SUSE Linux Enterprise Desktop 12-SP1 ) libarchive13-3.1.2-25.1.x86_64.rpm

Risk Information

Base Score

8.6

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

EPSS Score

Exploitation Probability

3.517%

CVE Information

Source CVE
CVE-2015-2304

Associated CVE
CVE-2015-2304
CVE-2016-5418
CVE-2016-6250
CVE-2016-5844

Patch Details

No records found

References

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
http://advisories.mageia.org/MGASA-2015-0106.html
http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html
http://rhn.redhat.com/errata/RHSA-2016-1844.html
http://rhn.redhat.com/errata/RHSA-2016-1850.html
http://www.debian.org/security/2015/dsa-3180
http://www.debian.org/security/2016/dsa-3657
http://www.openwall.com/lists/oss-security/2015/01/07/5
http://www.openwall.com/lists/oss-security/2015/01/16/7
http://www.openwall.com/lists/oss-security/2016/06/23/6
http://www.openwall.com/lists/oss-security/2016/06/24/4
http://www.openwall.com/lists/oss-security/2016/07/20/1
http://www.openwall.com/lists/oss-security/2016/07/21/3
http://www.openwall.com/lists/oss-security/2016/08/09/2
http://www.securityfocus.com/bid/91808
http://www.securityfocus.com/bid/92036
http://www.securityfocus.com/bid/93165
http://www.securitytracker.com/id/1035996
http://www.securitytracker.com/id/1036173
http://www.securitytracker.com/id/1036431
http://www.ubuntu.com/usn/USN-2549-1
https://access.redhat.com/errata/RHSA-2016:1852
https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html
https://bugzilla.redhat.com/show_bug.cgi?id=1347085
https://bugzilla.redhat.com/show_bug.cgi?id=1350280
https://bugzilla.redhat.com/show_bug.cgi?id=1362601
https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f
https://github.com/libarchive/libarchive/commit/3014e198
https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22
https://github.com/libarchive/libarchive/commit/59357157706d47c365b2227739e17daba3607526
https://github.com/libarchive/libarchive/commit/dfd6b54ce33960e420fb206d8872fb759b577ad9
https://github.com/libarchive/libarchive/files/295073/libarchiveOverflow.txt
https://github.com/libarchive/libarchive/issues/711
https://github.com/libarchive/libarchive/issues/717
https://github.com/libarchive/libarchive/issues/746
https://github.com/libarchive/libarchive/pull/110
https://groups.google.com/forum/#%21msg/libarchive-discuss/dN9y1VvE1Qk/Z9uerigjQn0J
https://security.gentoo.org/glsa/201701-03
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:22.libarchive.asc