PT-2016-6712 · Libarchive+5 · Libarchive+5

Hannob · Published 2016-06-24 · Updated 2024-06-15 · CVE-2016-5844

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.1

Description The issue is related to an integer overflow in the ISO parser, which can be triggered by a crafted ISO file. This can cause a denial of service, resulting in an application crash.

Recommendations For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue.

Exploit

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2016-1654

CESA-2016_1844

CESA-2016_1850

CVE-2016-5844

DLA-554-1

DSA-3657-1

OPENSUSE-SU-2024:10127-1

RHSA-2016:1844

RHSA-2016:1850

RHSA-2016_1844

RHSA-2016_1850

SUSE-SU-2016:2911-1

USN-3033-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Libarchive

References · 72

• 🔥 https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22 · Exploit
• 🔥 https://github.com/libarchive/libarchive/issues/717 · Exploit
• 🔥 https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html · Exploit
• http://rhn.redhat.com/errata/RHSA-2016-1850.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8920 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-5844 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5844 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5844 · Security Note
• https://ubuntu.com/security/CVE-2015-8925 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8928 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8924 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-1844.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8921 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8922 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10127-1 · Vendor Advisory