CVE-2015-8929: Libarchive

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file.

Affected products

• Libarchive Libarchive: up to and including 3.1.901a
• Suse Linux Enterprise Desktop: version 12 only
• Suse Linux Enterprise Server: version 12 only
• Suse Linux Enterprise Software Development Kit: version 12 only

Published 2016-09-20. Last modified 2026-06-17.