Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

  • Published: Sep 21, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-6250
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.6
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
oracle / linux 7 7.x
libarchive / libarchive - 3.2.0.x