Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Clausecker

#45791of 53,622
5.5Total CVSS
Vulnerabilities · 1
PT-2015-3348
5.5
2015-01-10
Libarchive · Libarchive · CVE-2016-7166
**Name of the Vulnerable Software and Affected Versions** libarchive versions prior to 3.2.0 **Description** The issue allows remote attackers to cause a denial of service, resulting in memory consumption and application crash, through a crafted gzip file. This is due to an error in resource management, specifically the lack of limits on the number of nested archives during unpacking. **Recommendations** For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue.