CVE-2016-5844

Published: Sep 21, 2016Modified: May 6, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.

Affected (15)

Products: Libarchive: Libarchive · Redhat: Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Server, Enterprise Linux Workstation, Enterprise Linux Hpc Node Eus, Enterprise Linux Server Aus, Enterprise Linux Server Eus · Oracle: Linux, Solaris

1 product

7 products

Enterprise Linux Desktop

Enterprise Linux Hpc Node

Enterprise Linux Server

Enterprise Linux Workstation

Enterprise Linux Hpc Node Eus

Enterprise Linux Server Aus

Enterprise Linux Server Eus

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libarchive Libarchive	Up to 3.2.0

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Hpc Node	Version 6.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Hpc Node Eus	Version 7.2
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Workstation	Version 7.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 6
Oracle Linux	Version 7

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 11.3

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (28)

http://rhn.redhat.com/errata/RHSA-2016-1844.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1850.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3657

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/06/23/6

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2016/06/24/4

Source: cve@mitre.org

Mailing List

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/91808

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036173

Source: cve@mitre.org

Third Party Advisory

https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1350280

Source: cve@mitre.org

Issue TrackingPatchThird Party AdvisoryVDB Entry

https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22

Source: cve@mitre.org

Exploit

https://github.com/libarchive/libarchive/issues/717

Source: cve@mitre.org

Exploit

https://security.gentoo.org/glsa/201701-03

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1844.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1850.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2016/dsa-3657

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2016/06/23/6

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2016/06/24/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/91808

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036173

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1350280

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party AdvisoryVDB Entry

https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://github.com/libarchive/libarchive/issues/717

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://security.gentoo.org/glsa/201701-03

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.