Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-6250

Опубликовано: 21 сент. 2016
Источник: nvd
CVSS3: 8.6
CVSS2: 7.5
EPSS Низкий

Описание

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*
Версия до 3.2.0 (включая)

EPSS

Процентиль: 83%
0.02019
Низкий

8.6 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 8.6
ubuntu
почти 9 лет назад

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

CVSS3: 7.9
redhat
около 9 лет назад

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

CVSS3: 8.6
debian
почти 9 лет назад

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allo ...

CVSS3: 8.6
github
около 3 лет назад

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

suse-cvrf
больше 8 лет назад

Security update for libarchive

EPSS

Процентиль: 83%
0.02019
Низкий

8.6 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190