3 matches found
Denial Of Service (DoS)
libarchive.so is vulnerable to denial of service. A double free bug is triggered when an attacker submits a malicious file to the function parsecodes with newsize = 0 in libarchive/archivereadsupportformatrar.c, causing the process to crash...
8.8CVSS8.3AI score0.04575EPSS
SaveExploits0References18Affected Software2
CVE-2016-4302
Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...
7.8CVSS8AI score0.04757EPSS
SaveExploits2References11
CVE-2016-4302
Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...
8.2AI score0.04757EPSS
SaveExploits2References11
20