CVE-2016-5418 The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...
HighCVSS 7.5
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libarchive(Debian:12) | < 3.2.1-4 | 3.2.1-4 |
| debian/libarchive(Debian:13) | < 3.2.1-4 | 3.2.1-4 |
| debian/libarchive(Debian:14) | < 3.2.1-4 | 3.2.1-4 |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 6.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| oracle linux | = 6 | No fix listed |
| oracle linux | = 7 | No fix listed |
| redhat openshift | = 3.1 | No fix listed |
| redhat openshift | = 3.2 | No fix listed |
| libarchive | <= 3.2.0 | No fix listed |
| redhat enterprise linux hpc node eus | = 7.2 | No fix listed |
| redhat enterprise linux server aus | = 7.2 | No fix listed |
| redhat enterprise linux server eus | = 7.2 | No fix listed |
References
- Debian Security Tracker CVE-2016-5418 vendor-advisory
- RHSA-2016:1844 third-party-advisory vendor-advisory
- RHSA-2016:1850 third-party-advisory vendor-advisory
- [oss-security] 20160809 FreeBSD update components vulns (libarchive, bsdiff, portsnap) exploit mailing-list technical-description
- www.oracle.com third-party-advisory
- 93165 vdb-entry
- RHSA-2016:1852 third-party-advisory vendor-advisory
- RHSA-2016:1853 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry
- gist.github.com exploit technical-description
- github.com patch
- github.com exploit patch
- GLSA-201701-03 vendor-advisory
- bugs.debian.org issue-tracking