Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libarchive | Aug 30, 2017 | Sep 21, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade-libarchive | Sep 27, 2016 | Sep 21, 2016 |
| Centos_linux | — | centos-upgrade-bsdcpiocentos-upgrade-bsdtarcentos-upgrade-libarchivecentos-upgrade-libarchive-devel | Sep 16, 2016 | Sep 16, 2016 |
| Debian | debian-upgrade-libarchive | Aug 31, 2016 | Aug 30, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Dec 7, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-app-arch-libarchive | Oct 30, 2017 | Sep 21, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libarchive | Nov 30, 2017 | Sep 21, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-libarchive-3-2-1-0-175-3-11-0-1-0 | May 29, 2017 | Sep 21, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-bsdcpiooracle-linux-upgrade-bsdtaroracle-linux-upgrade-libarchiveoracle-linux-upgrade-libarchive-devel | Sep 12, 2016 | Jun 24, 2016 |
| Redhat_linux | — | redhat-upgrade-bsdcpioredhat-upgrade-bsdtarredhat-upgrade-libarchiveredhat-upgrade-libarchive-debuginforedhat-upgrade-libarchive-devel | Oct 21, 2016 | Sep 12, 2016 |
| Suse | — | suse-upgrade-bsdtarsuse-upgrade-libarchive-develsuse-upgrade-libarchive13 | Nov 25, 2016 | Sep 21, 2016 |
| Ubuntu | ubuntu-upgrade-libarchive12ubuntu-upgrade-libarchive13 | Jul 14, 2016 | Jul 14, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub