ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-4809

—
CVSS 3.0
7.5 high
EPSS
5%p91
Published
()
Modified
Description

The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.

Vendors
redhatoraclelibarchive
Products
enterprise linux desktop, enterprise linux hpc node, enterprise linux server, enterprise linux workstation, enterprise linux hpc node eus, enterprise linux server aus, enterprise linux server eus, linux, libarchive
Weakness
CWE-20
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (4.8%)

In the news

No ingested article mentions this CVE yet.