CVE-2015-8921 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-8921 Interim 1 27 2023-09-13T01:16:30Z current 2021-05-30T13:36:23Z 2023-09-13T01:16:30Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-8921 The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html E-Mail link for SUSE-SU-2016:1909-1 https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00001.html E-Mail link for SUSE-SU-2016:1939-1 https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html E-Mail link for openSUSE-SU-2016:2036-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 SUSE Studio Onsite 1.3 bsdtar libarchive libarchive-devel-2.5.5-9.1 libarchive-devel-3.1.2-22.1 libarchive-devel-3.1.2-25.1 libarchive13 libarchive13-3.1.2-22.1 libarchive13-3.1.2-25.1 libarchive13-3.1.2-26.3.1 libarchive2-2.5.5-9.1 libarchive13-3.1.2-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libarchive13-3.1.2-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libarchive13-3.1.2-25.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libarchive13-3.1.2-25.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libarchive13-3.1.2-26.3.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP4 libarchive13-3.1.2-22.1 as a component of SUSE Linux Enterprise Server 12 SP1 libarchive13-3.1.2-22.1 as a component of SUSE Linux Enterprise Server 12 SP2 libarchive13-3.1.2-25.1 as a component of SUSE Linux Enterprise Server 12 SP3 libarchive13-3.1.2-25.1 as a component of SUSE Linux Enterprise Server 12 SP4 libarchive13-3.1.2-26.3.1 as a component of SUSE Linux Enterprise Server 12 SP5 libarchive13-3.1.2-22.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libarchive13-3.1.2-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libarchive-devel-2.5.5-9.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libarchive-devel-3.1.2-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libarchive-devel-3.1.2-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libarchive-devel-3.1.2-25.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libarchive-devel-3.1.2-25.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libarchive-devel-3.1.2-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libarchive2-2.5.5-9.1 as a component of SUSE Manager 2.1 libarchive2-2.5.5-9.1 as a component of SUSE Manager Proxy 2.1 libarchive2-2.5.5-9.1 as a component of SUSE OpenStack Cloud 5 libarchive-devel-2.5.5-9.1 as a component of SUSE Studio Onsite 1.3 libarchive13 as a component of HPE Helion OpenStack 8 libarchive as a component of HPE Helion OpenStack 8 libarchive as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 bsdtar as a component of SUSE Linux Enterprise Server 11 SP4 LTSS libarchive13 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libarchive as a component of SUSE Linux Enterprise Server 12 SP2-BCL libarchive13 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libarchive as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libarchive13 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libarchive as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libarchive13 as a component of SUSE Linux Enterprise Server 12 SP5 libarchive as a component of SUSE Linux Enterprise Server 12 SP5 libarchive as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libarchive13 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libarchive as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libarchive as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libarchive13 as a component of SUSE OpenStack Cloud 8 libarchive as a component of SUSE OpenStack Cloud 8 libarchive13 as a component of SUSE OpenStack Cloud 9 libarchive as a component of SUSE OpenStack Cloud 9 libarchive13 as a component of SUSE OpenStack Cloud Crowbar 8 libarchive as a component of SUSE OpenStack Cloud Crowbar 8 libarchive13 as a component of SUSE OpenStack Cloud Crowbar 9 libarchive as a component of SUSE OpenStack Cloud Crowbar 9 The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. CVE-2015-8921 SUSE Linux Enterprise Desktop 12 SP1:libarchive13-3.1.2-22.1 SUSE Linux Enterprise Desktop 12 SP2:libarchive13-3.1.2-22.1 SUSE Linux Enterprise Desktop 12 SP3:libarchive13-3.1.2-25.1 SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-25.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libarchive13-3.1.2-26.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 12 SP1:libarchive13-3.1.2-22.1 SUSE Linux Enterprise Server 12 SP2:libarchive13-3.1.2-22.1 SUSE Linux Enterprise Server 12 SP3:libarchive13-3.1.2-25.1 SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-25.1 SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.3.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libarchive13-3.1.2-22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libarchive13-3.1.2-22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libarchive-devel-2.5.5-9.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libarchive-devel-3.1.2-22.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libarchive-devel-3.1.2-22.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libarchive-devel-3.1.2-25.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-25.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-22.1 SUSE Manager 2.1:libarchive2-2.5.5-9.1 SUSE Manager Proxy 2.1:libarchive2-2.5.5-9.1 SUSE OpenStack Cloud 5:libarchive2-2.5.5-9.1 SUSE Studio Onsite 1.3:libarchive-devel-2.5.5-9.1 HPE Helion OpenStack 8:libarchive HPE Helion OpenStack 8:libarchive13 SUSE Linux Enterprise High Performance Computing 12 SP5:libarchive SUSE Linux Enterprise Server 11 SP4 LTSS:bsdtar SUSE Linux Enterprise Server 12 SP2-BCL:libarchive SUSE Linux Enterprise Server 12 SP2-BCL:libarchive13 SUSE Linux Enterprise Server 12 SP4-ESPOS:libarchive SUSE Linux Enterprise Server 12 SP4-ESPOS:libarchive13 SUSE Linux Enterprise Server 12 SP4-LTSS:libarchive SUSE Linux Enterprise Server 12 SP4-LTSS:libarchive13 SUSE Linux Enterprise Server 12 SP5:libarchive SUSE Linux Enterprise Server 12 SP5:libarchive13 SUSE Linux Enterprise Server Teradata 12 SP3:libarchive SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive SUSE OpenStack Cloud 8:libarchive SUSE OpenStack Cloud 8:libarchive13 SUSE OpenStack Cloud 9:libarchive SUSE OpenStack Cloud 9:libarchive13 SUSE OpenStack Cloud Crowbar 8:libarchive SUSE OpenStack Cloud Crowbar 8:libarchive13 SUSE OpenStack Cloud Crowbar 9:libarchive SUSE OpenStack Cloud Crowbar 9:libarchive13 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H