CVE-2016-4804

Published: Jun 3, 2016Modified: May 6, 2026

6.2

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.5 / Impact: 3.6

Source: NVD

Description

The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function.

Affected (7)

Products: Dosfstools Project: Dosfstools · Opensuse: Leap, Opensuse · Canonical: Ubuntu Linux

Dosfstools Project

1 product

2 products

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dosfstools Project Dosfstools	Up to 3.0.28

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (18)

http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/90311

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2986-1

Source: cve@mitre.org

https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html

Source: cve@mitre.org

Patch

https://github.com/dosfstools/dosfstools/commit/e8eff147e9da1185f9afd5b25948153a3b97cf52

Source: cve@mitre.org

https://github.com/dosfstools/dosfstools/issues/25

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/dosfstools/dosfstools/issues/26

Source: cve@mitre.org

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/05/msg00028.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/90311

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2986-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/dosfstools/dosfstools/commit/e8eff147e9da1185f9afd5b25948153a3b97cf52

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/dosfstools/dosfstools/issues/25

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://github.com/dosfstools/dosfstools/issues/26

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/05/msg00028.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.