CVE

Id
95507  
CVE No.
CVE-2016-8687  
Status
Candidate  
Description
Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename.  
Phase
Assigned (20161015)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
798750 95507 CVE-2016-8687 MLIST:[oss-security] 20161015 Re: Libarchive/bsdtar: multiple crashes  View
798751 95507 CVE-2016-8687 URL:http://www.openwall.com/lists/oss-security/2016/10/16/11  View
798752 95507 CVE-2016-8687 MISC:https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-stack-based-buffer-overflow-in-bsdtar_expand_char-util-c/  View
798753 95507 CVE-2016-8687 MISC:https://github.com/libarchive/libarchive/commit/e37b620fe8f14535d737e89a4dcabaed4517bf1a  View
798754 95507 CVE-2016-8687 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1377926  View
798755 95507 CVE-2016-8687 GENTOO:GLSA-201701-03  View
798756 95507 CVE-2016-8687 URL:https://security.gentoo.org/glsa/201701-03  View
798757 95507 CVE-2016-8687 SUSE:openSUSE-SU-2016:3002  View
798758 95507 CVE-2016-8687 URL:http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html  View
798759 95507 CVE-2016-8687 BID:93781  View

Related JVN