CVE-2016-8688
low-risk
Published 2017-02-15
The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c.
Do I need to act?
-
0.23% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10
Medium
LOCAL
/ LOW complexity
Affected Products (2)
Affected Vendors
References (24)
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html
Third Party Advisory
http://www.securityfocus.com/bid/93781
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1377923
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html
Third Party Advisory
http://www.securityfocus.com/bid/93781
and 4 more references
26
/ 100
low-risk
Severity
18/34 · Moderate
Exploitability
1/34 · Minimal
Exposure
7/34 · Low