Data Handling in libarchive - CVE-2016-5418

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU33271

Data Handling in libarchive - CVE-2016-5418

Published: September 21, 2016 / Updated: August 3, 2020


Vulnerability identifier: #VU33271
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-5418
CWE-ID: CWE-19
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.


Affected software

libarchive
libarchive (Alpine package)
atomic-openshift (Red Hat package)
openshift-ansible (Red Hat package)
Red Hat OpenShift Container Platform

How to mitigate CVE-2016-5418

Install update from vendor's website.

libarchive - update to 3.2.1
libarchive (Alpine package) - update to 3.2.1-r0
atomic-openshift (Red Hat package) - update to 3.2.1.15-1.git.0.d84be7f.el7
openshift-ansible (Red Hat package) - update to 3.2.28-1.git.0.5a85fc5.el7

External References

Related Security Bulletins