CVE-2017-15874 - archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a r

CVE-2017-15874

Summary

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

References

Vulnerable Configurations

cpe:2.3:a:busybox:busybox:1.27.2:*:*:*:*:*:*:*
cpe:2.3:a:busybox:busybox:1.27.2:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:P

refmap via4

misc

https://bugs.busybox.net/show_bug.cgi?id=10436

Last major update

31-10-2017 - 21:48

Published

24-10-2017 - 20:29

Last modified

31-10-2017 - 21:48