CVE-2015-8926

Medium

Description

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLibarchive
PublishedSep 20, 2016
First seenSep 20, 2016

How to fix

Affected products

ProductAffected versionsFixed in
libarchive libarchivev ≤ 3.1.901a—
canonical ubuntu_linux12.04, 14.04, 15.10, 16.04—
suse linux_enterprise_desktop12—
suse linux_enterprise_server12—
suse linux_enterprise_software_development_kit12—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.