Published: 21/09/2016 Updated: 27/12/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

libarchive prior to 3.2.0 does not limit the number of recursive decompressions, which allows remote malicious users to cause a denial of service (memory consumption and application crash) via a crafted gzip file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux server eus 7.2
redhat enterprise linux hpc node eus 7.2
redhat enterprise linux server 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server aus 7.2
redhat enterprise linux desktop 7.0
redhat enterprise linux hpc node 7.0
libarchive libarchive
redhat enterprise linux desktop 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux hpc node 6.0
redhat enterprise linux server 6.0
oracle linux 7
oracle linux 6

Debian Bug report logs - #837714 libarchive: CVE-2016-5418: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite Package: src:libarchive; Maintainer for src:libarchive is Peter Pentchev <roam@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 13 Sep 2016 19:45:02 ...

libarchive could be made to crash, overwrite files, or run programs as your login if it opened a specially crafted file ...

Several vulnerabilities were discovered in libarchive, a multi-format archive and compression library, which may lead to denial of service (memory consumption and application crash), bypass of sandboxing restrictions and overwrite arbitrary files with arbitrary data from an archive, or the execution of arbitrary code For the stable distribution (j ...

A flaw was found in the way libarchive handled hardlink archive entries of non-zero size Combined with flaws in libarchive's file system sandboxing, this issue could cause an application using libarchive to overwrite arbitrary files with arbitrary data from the archive (CVE-2016-5418) Multiple out-of-bounds write flaws were found in libarchive S ...

A vulnerability was found in libarchive A specially crafted gzip file can cause libarchive to allocate memory without limit, eventually leading to a crash ...

CWE-399 https://bugzilla.redhat.com/show_bug.cgi?id=1347086 http://rhn.redhat.com/errata/RHSA-2016-1850.html http://rhn.redhat.com/errata/RHSA-2016-1844.html https://github.com/libarchive/libarchive/issues/660 https://github.com/libarchive/libarchive/commit/6e06b1c89dd0d16f74894eac4cfc1327a06ee4a0 http://www.openwall.com/lists/oss-security/2016/09/08/15 http://www.securityfocus.com/bid/92901 http://www.openwall.com/lists/oss-security/2016/09/08/18 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207362 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html https://security.gentoo.org/glsa/201701-03 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837714 https://usn.ubuntu.com/3225-1/https://nvd.nist.gov

CVE-2016-7166

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect