CVE:CVE-2015-8929
CNNVD:CNNVD-201606-463
libarchive是一个多格式存档和压缩库。
libarchive 3.1.901a及之前的版本中的archive_read_extract2.c文件中的‘the __archive_read_get_extract’函数存在内存泄露漏洞。远程攻击者可借助tar文件利用该漏洞造成拒绝服务。
solution:Upgrade suse linux_enterprise_desktop to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_server to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade libarchive libarchive to a higher version than 3.1.901a,and avoid the version (,3.1.901a]