CVE-2016-6250 Integer overflow in n/a
Remote attackers can trigger an integer overflow in libarchive's ISO9660 writer, leading to application crashes or arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-6250?
CVE-2016-6250 is a high-severity vulnerability in Libarchive Libarchive, published on 21 Sep 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
Weakness: CWE-190
Which versions are affected by CVE-2016-6250?
It affects 2 products.
Products include Libarchive Libarchive, Oracle Linux.
How do I fix CVE-2016-6250?
Upgrade to a fixed version.
Is CVE-2016-6250 being exploited?
There is no known exploitation of CVE-2016-6250 in the wild and no public exploit code.
Other vulnerabilities in Libarchive Libarchive
Sources
Also known as ALPINE-CVE-2016-6250, DEBIAN-CVE-2016-6250, GHSA-m79p-4p7w-x53w, UBUNTU-CVE-2016-6250.