p PatchFirst

CVE-2015-2304

CVE-2015-2304

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive.

EPSS 4.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libarchive Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.1.2-11

    Update to 3.1.2-11

  • libarchive Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.1.2-11

    Update to 3.1.2-11

  • libarchive Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.1.2-11

    Update to 3.1.2-11

  • libarchive Ubuntu:14.04:LTS

    Versions
    • 3.1.2-5ubuntu1
    • 3.1.2-7ubuntu1
    • 3.1.2-7ubuntu2
    Affected ranges
    • ECOSYSTEM: < 3.1.2-7ubuntu2.1

    Update to 3.1.2-7ubuntu2.1

Original sources

Check your server →