[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzIyM_m_fe_y-YU3Z5g5Q1Ctt-WaBKXeiraP9z38KBtI":3,"g5a-risk:CVE-2015-8921":218},{"success":4,"data":5,"meta":216},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":72,"references":73,"referencesCount":145,"weaknesses":146,"weaknessesCount":155,"isActivelyExploited":156,"cisaInfo":15,"otxData":15,"relatedBlogPosts":157,"seoMetadata":158,"configurations":183,"relatedVendorCves":214,"notableEvents":215},"CVE-2015-8921","What is CVE-2015-8921?","The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.","The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a cra...","2016-09-20T14:15:07.337","2025-04-12T10:46:40.837",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.11992,[39,39,39,39,39,39,39],"High",[43,48,51,54,58,63,66,69],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"novell","suse_linux_enterprise_software_development_kit","12.0","cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*",{"vendor":44,"product":49,"version":46,"criteria":50,"vulnerable":4},"suse_linux_enterprise_desktop","cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*",{"vendor":44,"product":52,"version":46,"criteria":53,"vulnerable":4},"suse_linux_enterprise_server","cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*",{"vendor":55,"product":55,"version":56,"criteria":57,"vulnerable":4},"libarchive","*","cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":61,"criteria":62,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",{"vendor":59,"product":60,"version":64,"criteria":65,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":59,"product":60,"version":67,"criteria":68,"vulnerable":4},"15.10","cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":70,"criteria":71,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",8,[74,79,83,86,90,94,97,101,105,109,113,117,121,123,125,127,129,131,133,135,137,139,141,143],{"url":75,"source":76,"tags":77},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00025.html","Opensuse",[78],"Third Party Advisory",{"url":80,"source":81,"tags":82},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1844.html","Red Hat",[],{"url":84,"source":81,"tags":85},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1850.html",[],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3657","Debian",[],{"url":91,"source":92,"tags":93},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F06\u002F17\u002F2","Openwall",[78],{"url":95,"source":92,"tags":96},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F06\u002F17\u002F5",[78],{"url":98,"source":99,"tags":100},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Flinuxbulletinjul2016-3090544.html","Oracle",[],{"url":102,"source":103,"tags":104},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F91307","Securityfocus",[],{"url":106,"source":107,"tags":108},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-3033-1","Ubuntu",[78],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fblog.fuzzing-project.org\u002F47-Many-invalid-memory-access-issues-in-libarchive.html","Fuzzing-project",[78],{"url":114,"source":115,"tags":116},"https:\u002F\u002Fgithub.com\u002Flibarchive\u002Flibarchive\u002Fissues\u002F512","GitHub",[],{"url":118,"source":119,"tags":120},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201701-03","Gentoo",[],{"url":75,"source":76,"tags":122},[78],{"url":80,"source":81,"tags":124},[],{"url":84,"source":81,"tags":126},[],{"url":87,"source":88,"tags":128},[],{"url":91,"source":92,"tags":130},[78],{"url":95,"source":92,"tags":132},[78],{"url":98,"source":99,"tags":134},[],{"url":102,"source":103,"tags":136},[],{"url":106,"source":107,"tags":138},[78],{"url":110,"source":111,"tags":140},[78],{"url":114,"source":115,"tags":142},[],{"url":118,"source":119,"tags":144},[],24,[147],{"id":148,"name":149,"description":150,"extendedDescription":151,"status":152,"abstraction":153,"structure":154},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":159,"metaDescription":160,"keywords":161,"canonicalUrl":162,"structuredData":163},"What is CVE-2015-8921? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-8921, a high severity cyber security vulnerability from 2016. The ae_strtofflags function in archive_entry.c in libarchive...","CVE-2015-8921, CVE-2015-8921 vulnerability, CVE-2015-8921 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, novell security, libarchive security, canonical security, suse_linux_enterprise_software_development_kit vulnerability, suse_linux_enterprise_desktop vulnerability, suse_linux_enterprise_server vulnerability, libarchive vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2015-8921",{"@context":164,"@type":165,"headline":159,"description":160,"datePublished":10,"dateModified":11,"author":166,"publisher":170,"about":174,"mainEntityOfPage":178,"articleSection":181,"keywords":182},"https:\u002F\u002Fschema.org","TechArticle",{"@type":167,"name":168,"url":169},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":167,"name":168,"url":169,"logo":171},{"@type":172,"url":173},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":175,"name":6,"description":176,"additionalType":177},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":179,"@id":180},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-8921","Cybersecurity","CVE-2015-8921, CVE-2015-8921 vulnerability, CVE-2015-8921 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[184,195,202],{"Operator":15,"Negate":15,"Nodes":185},[186],{"Operator":187,"Negate":15,"CPEMatch":188},"OR",[189,191,193],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":192,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6359EF76-9371-4418-8694-B604CF02CF63",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":194,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"81D94366-47D6-445A-A811-39327B150FCD",{"Operator":15,"Negate":15,"Nodes":196},[197],{"Operator":187,"Negate":15,"CPEMatch":198},[199],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":200,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":201},"DC45D478-0BA2-4386-B1D2-E516D9AC28A9","3.1.901a",{"Operator":15,"Negate":15,"Nodes":203},[204],{"Operator":187,"Negate":15,"CPEMatch":205},[206,208,210,212],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":207,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":209,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":211,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E88A537F-F4D0-46B9-9E37-965233C2A355",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",[],[],{"lastModified":11,"cacheTime":217,"version":32},1792252947678,{"score":219,"band":220,"action":221,"scoredAt":222},48,"Medium","Plan remediation","2026-10-16T06:40:13.624819+00:00"]