Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-8923
4.3
MEDIUMCVSS v2
Published
September 20, 2016
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.
NPM
GitHub