CVE

Id
91120  
CVE No.
CVE-2016-4301  
Status
Candidate  
Description
Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file.  
Phase
Assigned (20160427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
783579 91120 CVE-2016-4301 MISC:http://blog.talosintel.com/2016/06/the-poisoned-archives.html  View
783580 91120 CVE-2016-4301 MISC:http://www.talosintel.com/reports/TALOS-2016-0153/  View
783581 91120 CVE-2016-4301 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1348441  View
783582 91120 CVE-2016-4301 CONFIRM:https://github.com/libarchive/libarchive/commit/a550daeecf6bc689ade371349892ea17b5b97c77  View
783583 91120 CVE-2016-4301 CONFIRM:https://github.com/libarchive/libarchive/issues/715  View
783584 91120 CVE-2016-4301 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
783585 91120 CVE-2016-4301 BID:91328  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3266 JVNDB-2016-004039 複数の Apple 製品の libxml2 におけるサービス運用妨害 (DoS) の脆弱性 複数の Apple 製品の libxml2 には、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-4614 91120 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004039.html  View