CVE-2016-5418

Published: Sep 21, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

Affected (16)

Products: Redhat: Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Server, Enterprise Linux Workstation, Openshift, Enterprise Linux Hpc Node Eus, Enterprise Linux Server Aus, Enterprise Linux Server Eus · Oracle: Linux · Libarchive: Libarchive

8 products

Enterprise Linux Desktop

Enterprise Linux Hpc Node

Enterprise Linux Server

Enterprise Linux Workstation

Enterprise Linux Hpc Node Eus

Enterprise Linux Server Aus

Enterprise Linux Server Eus

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Hpc Node	Version 6.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 6
Oracle Linux	Version 7

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Openshift	Version 3.1
Redhat Openshift	Version 3.2

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Libarchive Libarchive	Up to 3.2.0

Configuration E

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Hpc Node Eus	Version 7.2
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Workstation	Version 7.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (24)

http://rhn.redhat.com/errata/RHSA-2016-1844.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1850.html

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/08/09/2

Source: secalert@redhat.com

ExploitTechnical Description

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/93165

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2016:1852

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1853

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1362601

Source: secalert@redhat.com

Issue TrackingThird Party AdvisoryVDB Entry

https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f

Source: secalert@redhat.com

ExploitTechnical Description

https://github.com/libarchive/libarchive/commit/dfd6b54ce33960e420fb206d8872fb759b577ad9

Source: secalert@redhat.com

Patch

https://github.com/libarchive/libarchive/issues/746

Source: secalert@redhat.com

ExploitPatch

https://security.gentoo.org/glsa/201701-03

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-1844.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1850.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/08/09/2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitTechnical Description

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/93165

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2016:1852

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1853

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1362601

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party AdvisoryVDB Entry

https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitTechnical Description

https://github.com/libarchive/libarchive/commit/dfd6b54ce33960e420fb206d8872fb759b577ad9

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/libarchive/libarchive/issues/746

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://security.gentoo.org/glsa/201701-03

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.