Denial of service in p7zip

1) NULL pointer dereference

EUVDB-ID: #VU33136

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-9296

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications. A remote attacker can perform a denial of service (DoS) attack via a specially crafted 7z file.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability..

Vulnerable software versions

p7zip: 0.80 - 16.02

CPE2.3

• cpe:2.3:a:p7zip.sourceforge.net:p7zip:0.80:*:*:*:*:*:*:*
• cpe:2.3:a:p7zip.sourceforge.net:p7zip:0.81:*:*:*:*:*:*:*
• cpe:2.3:a:p7zip.sourceforge.net:p7zip:0.90:*:*:*:*:*:*:*

External links

https://www.securityfocus.com/bid/94294
https://github.com/yangke/7zip-null-pointer-dereference
https://sourceforge.net/p/p7zip/bugs/185/
https://sourceforge.net/p/p7zip/discussion/383043/thread/648d34db/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.