Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-8932
4.3
MEDIUMCVSS v2
Published
September 20, 2016
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.
NPM
GitHub