VDB
GCVE-110-MAGEIA-2015-150
GCVE-110-MAGEIA-2015-150
Advisory Published
Updated arj package fixes security vulnerabilities:
ARJ follows symlinks when unpacking stuff, even the symlinks that were created
during the same unpack process, making it vulnerable to a directory traversal
(CVE-2015-0556).
To protect from directory traversals, ARJ strips leading slash from the path
when unpacking, but this protection can be easily bypassed by adding more than
one leading slash to the path (CVE-2015-0557).
ARJ is vulnerable to a buffer overflow when processing a specially crafted arj
file (CVE-2015-2782).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | broadcom-wl | 0 (affected), 6.30.223.271-1.mga5.nonfree (unaffected) | — |
| Mageia | arj | 3.10.22-9.mga4 (unaffected), 0 (affected), 0 (affected), 3.10.22-9.mga4 (unaffected) | — |
| Mageia | kmod-broadcom-wl | 0 (affected), 6.30.223.271-1.mga5.nonfree (unaffected) | — |
References
Browse GCVE Records
74,198 records in the GCVE database · Updated July 21, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.