NVD

Id
21079  
Name
CVE-2016-6250  
Description
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-21  
Modified Date
2017-01-05  
Seq
2016-6250  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114728 21079 CVE-2016-6250 [oss-security] 20160720 Buffer overflow in libarchive-3.2.0  View
114729 21079 CVE-2016-6250 [oss-security] 20160721 Re: Buffer overflow in libarchive-3.2.0  View
114730 21079 CVE-2016-6250 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
114731 21079 CVE-2016-6250 92036  View
114732 21079 CVE-2016-6250 1036431  View
114733 21079 CVE-2016-6250 https://bugzilla.redhat.com/show_bug.cgi?id=1347085  View
114734 21079 CVE-2016-6250 https://github.com/libarchive/libarchive/commit/3014e198  View
114735 21079 CVE-2016-6250 https://github.com/libarchive/libarchive/files/295073/libarchiveOverflow.txt  View
114736 21079 CVE-2016-6250 https://github.com/libarchive/libarchive/issues/711  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4079 JVNDB-2016-004852 libarchive の ISO9660 writer における整数オーバーフローの脆弱性 libarchive の ISO9660 writer には、整数オーバーフローの脆弱性が存在します。 CVE-2016-6250 92757 CVE-2016-6250 21079 7.5 8.6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004852.html 2016-05-29 2016-09-27 View