CVE-2016-7166

MEDIUM · 5.5 CVSS Gepubliceerd: 21-09-2016 CWE-399

Beschrijving

libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.

Vendors

Redhat Libarchive Oracle

Affected products

Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Hpc Node Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Eus Enterprise Linux Workstation Libarchive Linux

References

rhn.redhat.com
rhn.redhat.com
www.openwall.com
www.openwall.com
www.oracle.com
www.securityfocus.com
bugs.freebsd.org
bugzilla.redhat.com
github.com
github.com
security.gentoo.org