CVE-2015-8915
Fixed in a distro release EPSS 2%
bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file.
Products: libarchive
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libarchive | 3.2.0-2 |
| Debian 13 | libarchive | 3.2.0-2 |
| Debian 14 | libarchive | 3.2.0-2 |
| Debian 7 | libarchive | 3.0.4-3+wheezy3 |
| Debian 8 | libarchive | 3.1.2-11+deb8u4 |
| Ubuntu 14.04 LTS | libarchive | 3.1.2-7ubuntu2.2 |
| Ubuntu 16.04 LTS | libarchive | 3.1.2-11ubuntu0.16.04.1 |