CVE-2015-8928

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0

Description The issue allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. This is due to a problem in the process add entry function in archive read support format mtree.c.

Recommendations For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted mtree files to minimize the risk of exploitation.