CVE-2015-8920

The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.

Date published : 2016-09-20

http://www.securityfocus.com/bid/91301

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html