K35246595 : libarchive vulnerability CVE-2016-5418

Security Advisory Description

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file. (CVE-2016-5418)
Impact
BIG-IPOn BIG-IP and VIPRION platforms that are configured to use Virtual Clustered Multiprocessing (vCMP), an authenticated administrator could upload a specially crafted ISO file and use that ISO file to create a vCMP guest virtual machine. A successful attack may allow unauthorized modification of files.LineRate
This functionality is exposed only to authenticated administrators using the LineRate Manager GUI, CLI, or REST API when performing a system restore with a backup file of the LineRate system that has been tampered. A successful attack may allow unauthorized modification of files.