Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-8689

Опубликовано: 15 сент. 2016
Источник: redhat
CVSS3: 5.3
CVSS2: 4.3

Описание

The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.

Отчет

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libarchiveNot affected
Red Hat Enterprise Linux 7libarchiveWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-228->CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1377925libarchive: heap based buffer overflow in read_header (archive_read_support_format_7zip.c)

5.3 Medium

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 9 лет назад

The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.

CVSS3: 7.5
nvd
почти 9 лет назад

The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.

CVSS3: 7.5
debian
почти 9 лет назад

The read_Header function in archive_read_support_format_7zip.c in liba ...

CVSS3: 7.5
github
больше 3 лет назад

The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.

suse-cvrf
около 9 лет назад

Security update for libarchive

5.3 Medium

CVSS3

4.3 Medium

CVSS2