CVE-2016-1541 — Improper Input Validation in Libarchive

CWE-20 — Improper Input ValidationCWE-122 — Heap-based Buffer Overflow12 documents8 sources
Severity
8.8HIGHNVD
EPSS
9.3%
top 7.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
LibarchiveDebian Libarchive
Timeline
PublishedMay 7
Latest updateMay 14

Description

Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/libarchive< libarchive 3.1.2-11.1 (bookworm)
▶Debianlibarchive/libarchive< 3.1.2-11.1+3
▶Ubuntulibarchive/libarchive< 3.1.2-7ubuntu2.2+1
▶NVDlibarchive/libarchive3.1.901a

🔴Vulnerability Details

3
GHSA
GHSA-w2vf-7r3f-2gg2: Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip↗2022-05-14
▶
OSV
libarchive vulnerabilities↗2016-05-17
▶
OSV
CVE-2016-1541: Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip↗2016-05-07
▶

📋Vendor Advisories

3
Ubuntu
libarchive vulnerabilities↗2016-05-17
▶
Red Hat
libarchive: zip_read_mac_metadata() heap-based buffer overflow↗2016-05-02
▶
Debian
CVE-2016-1541: libarchive - Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read...↗2016
▶

📄Research Papers

1
arXiv
Summoning Demons: The Pursuit of Exploitable Bugs in Machine Learning↗2017-01-17
▶

💬Community

4
Bugzilla
CVE-2016-1541 libarchive: heap-based buffer overflow due to improper input validation [epel-5]↗2016-05-12
▶
Bugzilla
CVE-2016-1541 libarchive: heap-based buffer overflow due to improper input validation [fedora-all]↗2016-05-09
▶
Bugzilla
CVE-2016-1541 libarchive: heap-based buffer overflow due to improper input validation [epel-6]↗2016-05-09
▶
Bugzilla
CVE-2016-1541 libarchive: zip_read_mac_metadata() heap-based buffer overflow↗2016-05-09
▶