CVE

Id
93070  
CVE No.
CVE-2016-6250  
Status
Candidate  
Description
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.  
Phase
Assigned (20160720)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792425 93070 CVE-2016-6250 MLIST:[oss-security] 20160720 Buffer overflow in libarchive-3.2.0  View
792426 93070 CVE-2016-6250 URL:http://www.openwall.com/lists/oss-security/2016/07/20/1  View
792427 93070 CVE-2016-6250 MLIST:[oss-security] 20160721 Re: Buffer overflow in libarchive-3.2.0  View
792428 93070 CVE-2016-6250 URL:http://www.openwall.com/lists/oss-security/2016/07/21/3  View
792429 93070 CVE-2016-6250 MISC:https://github.com/libarchive/libarchive/files/295073/libarchiveOverflow.txt  View
792430 93070 CVE-2016-6250 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1347085  View
792431 93070 CVE-2016-6250 CONFIRM:https://github.com/libarchive/libarchive/commit/3014e198  View
792432 93070 CVE-2016-6250 CONFIRM:https://github.com/libarchive/libarchive/issues/711  View
792433 93070 CVE-2016-6250 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
792434 93070 CVE-2016-6250 BID:92036  View
792435 93070 CVE-2016-6250 URL:http://www.securityfocus.com/bid/92036  View
792436 93070 CVE-2016-6250 SECTRACK:1036431  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4984 JVNDB-2016-005757 D-Link 製ルータの HNAP サービスにスタックバッファオーバーフローの脆弱性 D-Link Systems, Inc. が提供する複数のルータ製品には、HNAP ログイン動作に関するスタックバッファオーバーフローの脆弱性が存在します。 CVE-2016-6563 93070 9.3 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005757.html  View