CVE-2016-2335

moderate-risk

Published 2016-06-07

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Do I need to act?

2.1% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

NETWORK / LOW complexity

Affected Products (5)

Opensuse

Debian Linux

7-Zip

Affected Vendors

7-Zip Opensuse Debian

References (26)

Exploit http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html

Mailing List http://lists.opensuse.org/opensuse-updates/2016-06/msg00004.html

Mailing List http://lists.opensuse.org/opensuse-updates/2016-06/msg00098.html

Mailing List http://lists.opensuse.org/opensuse-updates/2016-07/msg00069.html

Third Party Advisory http://www.debian.org/security/2016/dsa-3599

Third Party Advisory http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html

Third Party Advisory http://www.securityfocus.com/bid/90531

Third Party Advisory http://www.securitytracker.com/id/1035876

Exploit http://www.talosintel.com/reports/TALOS-2016-0094/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.gentoo.org/glsa/201701-27

https://usn.ubuntu.com/3913-1/

Exploit http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html

Mailing List http://lists.opensuse.org/opensuse-updates/2016-06/msg00004.html

Mailing List http://lists.opensuse.org/opensuse-updates/2016-06/msg00098.html

Mailing List http://lists.opensuse.org/opensuse-updates/2016-07/msg00069.html

Third Party Advisory http://www.debian.org/security/2016/dsa-3599

Third Party Advisory http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html

Third Party Advisory http://www.securityfocus.com/bid/90531

and 6 more references

/ 100

moderate-risk

Severity 30/34 · Critical

Exploitability 5/34 · Minimal

Exposure 12/34 · Low