PT-2016-6712 · Libarchive+5 · Libarchive+5

Hannob · Publicado 2016-06-24 · Atualizado 2024-06-15 · CVE-2016-5844

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.1

Description The issue is related to an integer overflow in the ISO parser, which can be triggered by a crafted ISO file. This can cause a denial of service, resulting in an application crash.

Recommendations For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue.

Exploit

Correção

DoS

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2016-1654

CESA-2016_1844

CESA-2016_1850

CVE-2016-5844

DLA-554-1

DSA-3657-1

OPENSUSE-SU-2024:10127-1

RHSA-2016:1844

RHSA-2016:1850

RHSA-2016_1844

RHSA-2016_1850

SUSE-SU-2016:2911-1

USN-3033-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Libarchive

Referências · 72

• 🔥 https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22 · Exploit
• 🔥 https://github.com/libarchive/libarchive/issues/717 · Exploit
• 🔥 https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html · Exploit
• http://rhn.redhat.com/errata/RHSA-2016-1850.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-8920 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-5844 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-6250 · Nota
• https://bugzilla.suse.com/1005076 · Nota
• https://suse.com/security/cve/CVE-2015-8934 · Nota
• https://suse.com/security/cve/CVE-2016-1541 · Nota
• https://suse.com/security/cve/CVE-2016-5844 · Nota
• https://suse.com/security/cve/CVE-2015-8933 · Nota
• https://osv.dev/vulnerability/CVE-2016-5844 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-5844 · Nota de Segurança