ISOMAN

CVE

CVE-2015-2304

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive.

Severity
MEDIUM
CVSS
6.4
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://advisories.mageia.org/MGASA-2015-0106.html
  2. http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html
  3. http://www.debian.org/security/2015/dsa-3180
  4. http://www.mandriva.com/security/advisories?name=MDVSA-2015:157
  5. http://www.openwall.com/lists/oss-security/2015/01/07/5
  6. http://www.openwall.com/lists/oss-security/2015/01/16/7
  7. http://www.securitytracker.com/id/1035996
  8. http://www.ubuntu.com/usn/USN-2549-1
  9. https://github.com/libarchive/libarchive/commit/59357157706d47c365b2227739e17daba3607526
  10. https://github.com/libarchive/libarchive/pull/110
  11. https://groups.google.com/forum/#%21msg/libarchive-discuss/dN9y1VvE1Qk/Z9uerigjQn0J
  12. https://security.gentoo.org/glsa/201701-03
  13. https://www.freebsd.org/security/advisories/FreeBSD-SA-16:22.libarchive.asc
  14. http://advisories.mageia.org/MGASA-2015-0106.html
  15. http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html
  16. http://www.debian.org/security/2015/dsa-3180
  17. http://www.mandriva.com/security/advisories?name=MDVSA-2015:157
  18. http://www.openwall.com/lists/oss-security/2015/01/07/5
  19. http://www.openwall.com/lists/oss-security/2015/01/16/7
  20. http://www.securitytracker.com/id/1035996