Red Hat Security AdvisoryRHSA-2011:1507
libarchive security update
Released 2011-12-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) libarchive-2.8.3-3.el6_1, libarchive-2.8.3-3.el6_1.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) libarchive-2.8.3-3.el6_1, libarchive-devel-2.8.3-3.el6_1, libarchive-devel-2.8.3-3.el6_1.ppc
Fixes 2 records
Priority LOW 37
Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TAR archive.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04199 · Published 2012-04-13 · Fixed CWE-119
Priority LOW 37
Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service (application cra…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04199 · Published 2012-04-13 · Fixed CWE-119
