Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Alwin Maier

#30691of 53,632
8.6Total CVSS
Vulnerabilities · 1
PT-2016-6806
8.6
2016-06-29
Libarchive · Libarchive · CVE-2016-6250
**Name of the Vulnerable Software and Affected Versions** libarchive versions prior to 3.2.1 **Description** The issue is related to an integer overflow in the ISO9660 writer, which can be triggered by verifying filename lengths when writing an ISO9660 archive. This can lead to a buffer overflow, causing a denial of service or potentially allowing remote attackers to execute arbitrary code. **Recommendations** For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ISO9660 writer to minimize the risk of exploitation.