ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-6250

—
CVSS 3.0
8.6 high
EPSS
6%p93
Published
()
Modified
Description

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

Vendors
oraclelibarchive
Products
linux, libarchive
Weakness
CWE-190
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
NVD CVE.org GitHub PoCs EPSS (6.3%)

In the news

No ingested article mentions this CVE yet.