CVE-2016-5844

MITTEL 6.5CVE-2016-5844 · Published 21/09/2016 · updated 17/06/2026

Kurz gesagt

CVE-2016-5844 ist eine Schwachstelle (MITTEL (CVSS 6.5)) in libarchive (libarchive).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.1%, höher als bei 90.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
libarchive libarchive	`≤ 3.2.0`	No fix yet

Description

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.

References

rhn.redhat.com/errata/RHSA-2016-1844.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2016-1850.html · Third Party Advisory
debian.org/security/2016/dsa-3657
openwall.com/lists/oss-security/2016/06/23/6 · Mailing List
openwall.com/lists/oss-security/2016/06/24/4 · Mailing List
oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html · Third Party Advisory
oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html · Third Party Advisory
securityfocus.com/bid/91808 · Third Party Advisory
securitytracker.com/id/1036173 · Third Party Advisory
blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html · Exploit
bugzilla.redhat.com/show_bug.cgi

Weitere Schwachstellen in libarchive

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libarchive

≤ 3.2.0

No fix yet

Weitere Schwachstellen in libarchive

Alle anzeigen →