Integer Overflow Vulnerability in libarchive Affects Multiple Platforms
CVE-2015-8931

7.8HIGH

Key Information:

Vendor: Libarchive
Status: Libarchive
Vendor: CVE Published:; 20 September 2016

What is CVE-2015-8931?

The vulnerability manifests through multiple integer overflows in the 'get_time_t_max' and 'get_time_t_min' functions located in 'archive_read_support_format_mtree.c' within libarchive versions prior to 3.2.0. By crafting a malicious mtree file, remote attackers can exploit these overflows, potentially leading to undefined behavior and compromising the security of systems utilizing this library.