CVE-2015-8925

The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.

CVSS v3.0

5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

2.06% chance of exploitation in the next 30 days, 80th percentile

Published

2016-09-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• libarchive/libarchive/issues/516

References

• CVE Record
• NVD entry

Related

• CVE-2019-19221
• CVE-2024-37407
• CVE-2025-5914
• CVE-2015-8915
• CVE-2015-8953
• CVE-2015-8873