CVE-2015-8931: Integer Overflow
Multiple integer overflows in the (1) gettimetmax and (2) gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8931?
CVE-2015-8931 is considered a critical vulnerability due to its potential to trigger undefined behavior in applications using the affected versions of libarchive.
How do I fix CVE-2015-8931?
To fix CVE-2015-8931, upgrade libarchive to version 3.2.0 or later, specifically to versions 3.4.3-2+deb11u1, 3.6.2-1+deb12u1, or 3.7.4-1.
What type of vulnerability is CVE-2015-8931?
CVE-2015-8931 is an integer overflow vulnerability found in the get_time_t_max and get_time_t_min functions of libarchive.
Which software is affected by CVE-2015-8931?
Libarchive versions prior to 3.2.0, including distributions such as various versions of Debian and Ubuntu, are affected by CVE-2015-8931.
Can CVE-2015-8931 be exploited remotely?
Yes, CVE-2015-8931 can be exploited remotely through a crafted mtree file, allowing attackers to potentially execute arbitrary code.