Undefined behavior (invalid left shift) was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 1 | libarchive | 2016-09-27 10:30 | ALAS-2016-743 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv2 | 3.5 | AV:N/AC:M/Au:S/C:N/I:N/A:P |
Amazon Linux | CVSSv3 | 3.5 | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L |
NVD | CVSSv2 | 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |
NVD | CVSSv3 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |