CVE-2016-5418

HIGH

libarchive <3.2.0 - Code Injection

Title source: llm
STIX 2.1

Description

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

References (12)

Core 12
Core References
Issue Tracking, Third Party Advisory, VDB Entry x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1362601
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2016:1852
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2016:1853
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2016-1844.html
Exploit, Technical Description x_refsource_misc
https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f
Exploit, Patch x_refsource_confirm
https://github.com/libarchive/libarchive/issues/746
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2016-1850.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201701-03
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93165
Exploit, Technical Description mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/08/09/2

Scores

CVSS v3 7.5
EPSS 0.0471
EPSS Percentile 90.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-19 CWE-20
Status published
Products (16)
libarchive/libarchive < 3.2.0
oracle/linux 6
oracle/linux 7
redhat/enterprise_linux_desktop 6.0
redhat/enterprise_linux_desktop 7.0
redhat/enterprise_linux_hpc_node 6.0
redhat/enterprise_linux_hpc_node 7.0
redhat/enterprise_linux_hpc_node_eus 7.2
redhat/enterprise_linux_server 6.0
redhat/enterprise_linux_server 7.0
... and 6 more
Published Sep 21, 2016
Tracked Since Feb 18, 2026