CVE-2016-4809

Published: Sep 21, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.

Affected (14)

Products: Redhat: Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Server, Enterprise Linux Workstation, Enterprise Linux Hpc Node Eus, Enterprise Linux Server Aus, Enterprise Linux Server Eus · Oracle: Linux · Libarchive: Libarchive

7 products

Enterprise Linux Desktop

Enterprise Linux Hpc Node

Enterprise Linux Server

Enterprise Linux Workstation

Enterprise Linux Hpc Node Eus

Enterprise Linux Server Aus

Enterprise Linux Server Eus

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Hpc Node	Version 6.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Hpc Node Eus	Version 7.2
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Workstation	Version 7.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 6
Oracle Linux	Version 7

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Libarchive Libarchive	Up to 3.2.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (18)

http://rhn.redhat.com/errata/RHSA-2016-1844.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1850.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3657

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/91813

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1347084

Source: cve@mitre.org

Issue Tracking

https://github.com/libarchive/libarchive/commit/fd7e0c02

Source: cve@mitre.org

Issue TrackingPatch

https://github.com/libarchive/libarchive/issues/705

Source: cve@mitre.org

Issue TrackingPatch

https://security.gentoo.org/glsa/201701-03

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1844.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1850.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2016/dsa-3657

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/91813

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1347084

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://github.com/libarchive/libarchive/commit/fd7e0c02

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://github.com/libarchive/libarchive/issues/705

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://security.gentoo.org/glsa/201701-03

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.