Lucene search
Alpine Linux Development TeamALPINE:CVE-2016-9296HistoryNov 12, 2016 - 2:59 a.m.
CVE-2016-9296
2016-11-1202:59:00
Alpine Linux Development Team
security.alpinelinux.org
9
0.002 Low
EPSS
Percentile
54.5%
A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.10-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.11-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.12-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.13-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.14-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.15-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.16-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.17-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.5-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
| Alpine | 3.6-main | noarch | p7zip | < 16.02-r1 | UNKNOWN |
Related
nessus
nessus
7-Zip < 16.03 NULL Pointer Dereference DoS
2018-05-14 00:00:00
Fedora 23 : p7zip (2016-1ca07cdcde)
2016-12-05 00:00:00
openvas
openvas
Fedora Update for p7zip FEDORA-2016-d4573a5c53
2016-12-05 00:00:00
Fedora Update for p7zip FEDORA-2016-1ca07cdcde
2016-12-05 00:00:00
Fedora Update for p7zip FEDORA-2016-1637001349
2016-12-07 00:00:00
debiancve
debiancve
CVE-2016-9296
2016-11-12 02:59:00
fedora
fedora
[SECURITY] Fedora 25 Update: p7zip-16.02-2.fc25
2016-11-30 05:31:59
[SECURITY] Fedora 24 Update: p7zip-16.02-2.fc24
2016-12-04 05:25:58
[SECURITY] Fedora 23 Update: p7zip-16.02-2.fc23
2016-12-04 23:21:15
cve
cve
CVE-2016-9296
2016-11-12 02:59:00
freebsd
freebsd
p7zip -- Null pointer dereference
2016-07-17 00:00:00
prion
prion
Null pointer dereference
2016-11-12 02:59:00
ubuntucve
ubuntucve
CVE-2016-9296
2016-11-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2016-9296 affecting package p7zip 16.02-22
2021-06-09 03:50:32
CVE-2016-9296 affecting package p7zip for versions less than 16.02-22
2022-04-09 06:51:52
CVE-2016-9296 affecting package p7zip for versions less than 16.02-23
2024-03-19 17:21:46