CVE-2015-2304

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive.

References

http://advisories.mageia.org/MGASA-2015-0106.html

http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html

http://www.debian.org/security/2015/dsa-3180

http://www.mandriva.com/security/advisories?name=MDVSA-2015:157

http://www.openwall.com/lists/oss-security/2015/01/07/5

http://www.openwall.com/lists/oss-security/2015/01/16/7

http://www.securitytracker.com/id/1035996

http://www.ubuntu.com/usn/USN-2549-1

https://github.com/libarchive/libarchive/commit/59357157706d47c365b2227739e17daba3607526

https://github.com/libarchive/libarchive/pull/110

https://groups.google.com/forum/#!msg/libarchive-discuss/dN9y1VvE1Qk/Z9uerigjQn0J

https://security.gentoo.org/glsa/201701-03

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:22.libarchive.asc

Details

Source: MITRE

Published: 2015-03-15

Updated: 2018-10-30

Type: CWE-22

Risk Information

CVSS v2

Base Score: 6.4

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P

Impact Score: 4.9

Exploitability Score: 10

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:x64:*:* versions up to 3.1.2 (inclusive)

Configuration 2

OR

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Tenable Plugins

View all (17 total)

IDNameProductFamilySeverity
135650EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-1488)NessusHuawei Local Security Checks
high
134515EulerOS Virtualization for ARM 64 3.0.2.0 : libarchive (EulerOS-SA-2020-1226)NessusHuawei Local Security Checks
high
132139EulerOS 2.0 SP3 : libarchive (EulerOS-SA-2019-2604)NessusHuawei Local Security Checks
high
131871EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2019-2379)NessusHuawei Local Security Checks
high
130664EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2019-2202)NessusHuawei Local Security Checks
high
96234GLSA-201701-03 : libarchive: Multiple vulnerabilitiesNessusGentoo Local Security Checks
high
95559openSUSE Security Update : libarchive (openSUSE-2016-1405)NessusSuSE Local Security Checks
high
95558openSUSE Security Update : libarchive (openSUSE-2016-1404)NessusSuSE Local Security Checks
high
95367SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2016:2911-1)NessusSuSE Local Security Checks
high
93187SUSE SLES11 Security Update : bsdtar (SUSE-SU-2016:1939-1)NessusSuSE Local Security Checks
high
92790Splunk Enterprise < 5.0.16 / 6.0.12 / 6.1.11 / 6.2.11 / 6.3.6 / 6.4.2 or Splunk Light < 6.4.2 Multiple VulnerabilitiesNessusCGI abuses
high
87984FreeBSD : libarchive -- multiple vulnerabilities (7c63775e-be31-11e5-b5fe-002590263bf5)NessusFreeBSD Local Security Checks
medium
83710SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2015:0667-1)NessusSuSE Local Security Checks
medium
82410Mandriva Linux Security Advisory : libarchive (MDVSA-2015:157)NessusMandriva Local Security Checks
medium
82268Ubuntu 12.04 LTS / 14.04 LTS / 14.10 : libarchive vulnerabilities (USN-2549-1)NessusUbuntu Local Security Checks
medium
82012openSUSE Security Update : libarchive (openSUSE-2015-248)NessusSuSE Local Security Checks
medium
81654Debian DSA-3180-1 : libarchive - security updateNessusDebian Local Security Checks
medium