Bugzilla – Bug 985679
VUL-1: CVE-2015-8928: bsdtar,libarchive: Heap out of bounds read in mtree parser
Last modified: 2022-06-10 12:52:43 UTC
CVE-2015-8928 > https://github.com/libarchive/libarchive/issues/550 > Heap out of bounds read in mtree parser Use CVE-2015-8928. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8928 http://seclists.org/oss-sec/2016/q2/566
Created attachment 681351 [details] libarchive-oob-process_add_entry.txt QA REPRODUCER: valgrind bsdtar xf libarchive-oob-process_add_entry.txt ==20464== Invalid read of size 1 ==20464== at 0x4C2DEE0: memcpy@@GLIBC_2.14 (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==20464== by 0x4E760CB: ??? (in /usr/lib64/libarchive.so.13.1.2) ==20464== by 0x4E545DA: ??? (in /usr/lib64/libarchive.so.13.1.2) ==20464== by 0x4E5470B: ??? (in /usr/lib64/libarchive.so.13.1.2) ==20464== by 0x405FD6: ??? (in /usr/bin/bsdtar) ==20464== by 0x406976: ??? (in /usr/bin/bsdtar) ==20464== by 0x404C19: ??? (in /usr/bin/bsdtar) ==20464== by 0x50FBB04: (below main) (libc-start.c:285) should not happen after update
Created attachment 681354 [details] 64d5628.patch 64d5628 commit that fix the issue
bugbot adjusting priority
SUSE-SU-2016:1909-1: An update that fixes 20 vulnerabilities is now available. Category: security (important) Bug References: 984990,985609,985665,985669,985673,985675,985679,985682,985685,985688,985689,985697,985698,985700,985703,985704,985706,985826,985832,985835 CVE References: CVE-2015-8918,CVE-2015-8919,CVE-2015-8920,CVE-2015-8921,CVE-2015-8922,CVE-2015-8923,CVE-2015-8924,CVE-2015-8925,CVE-2015-8926,CVE-2015-8928,CVE-2015-8929,CVE-2015-8930,CVE-2015-8931,CVE-2015-8932,CVE-2015-8933,CVE-2015-8934,CVE-2016-4300,CVE-2016-4301,CVE-2016-4302,CVE-2016-4809 Sources used: SUSE Linux Enterprise Software Development Kit 12-SP1 (src): libarchive-3.1.2-22.1 SUSE Linux Enterprise Server 12-SP1 (src): libarchive-3.1.2-22.1 SUSE Linux Enterprise Desktop 12-SP1 (src): libarchive-3.1.2-22.1
openSUSE-SU-2016:2036-1: An update that fixes 20 vulnerabilities is now available. Category: security (important) Bug References: 984990,985609,985665,985669,985673,985675,985679,985682,985685,985688,985689,985697,985698,985700,985703,985704,985706,985826,985832,985835 CVE References: CVE-2015-8918,CVE-2015-8919,CVE-2015-8920,CVE-2015-8921,CVE-2015-8922,CVE-2015-8923,CVE-2015-8924,CVE-2015-8925,CVE-2015-8926,CVE-2015-8928,CVE-2015-8929,CVE-2015-8930,CVE-2015-8931,CVE-2015-8932,CVE-2015-8933,CVE-2015-8934,CVE-2016-4300,CVE-2016-4301,CVE-2016-4302,CVE-2016-4809 Sources used: openSUSE Leap 42.1 (src): libarchive-3.1.2-13.2
is done
bsdtar still not fixed, libarchive done.
(In reply to Carlos López from comment #10) > bsdtar still not fixed, libarchive done. I'm not sure why I'm flagged as bugowner for bsdtar, but anyway ;) the specfile for bsdtar (in SLE-11) is stating : " # Issues which do not affect this version # CVE-2019-18408: no rar support # CVE-2016-5418: no posix write support # CVE-2016-6250: no iso9660 write support # CVE-2016-8687: no mtree format support # CVE-2016-8689: no 7zip format support # CVE-2016-7166 # CVE-2015-8930, CVE-2016-5844: no support for iso joliet format # CVE-2015-8919, CVE-2017-14503: no LHA format support # CVE-2015-8931, CVE-2015-8928, CVE-2015-8925.patch, CVE-2016-4301, \ # CVE-2016-4301.patch : no mtree format support # CVE-2015-8933: tar format has no support for sparse files # CVE-2015-8922, CVE-2016-4300.patch: no 7zip format support # CVE-2015-8934, CVE-2015-8926, CVE-2016-4302, CVE-2015-8916: no RAR format support # CVE-2016-1541: zip format does not handle Mac extensions # CVE-2015-8923: zip format does not handle Info-Zip Unix Extra Field (type 3) # Therefore, I would suggest to update our vulnerability DB. Closing bug as FIXED
(In reply to Frederic Crozat from comment #11) > the specfile for bsdtar (in SLE-11) is stating : " > # CVE-2015-8931, CVE-2015-8928, CVE-2015-8925.patch, CVE-2016-4301, \ > # CVE-2016-4301.patch : no mtree format support I've updated our tracking, thanks.