CVE-2016-4302

Published: 23 June 2016

Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.

Priority

CVSS 3 base score: 7.8

Status

Package	Release	Status
libarchive Launchpad, Ubuntu, Debian	Upstream	Needed




	Ubuntu 16.04 LTS (Xenial Xerus)	Released (3.1.2-11ubuntu0.16.04.2)
	Ubuntu 14.04 ESM (Trusty Tahr)	Released (3.1.2-7ubuntu2.3)
	Patches: Upstream: https://github.com/libarchive/libarchive/commit/05caadc7eedbef471ac9610809ba683f0c698700 Upstream: https://github.com/libarchive/libarchive/commit/5e29e82390bccfff514e710c90de8089ab5ef269

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4302
http://blog.talosintel.com/2016/06/the-poisoned-archives.html
http://www.talosintel.com/reports/TALOS-2016-0154/
https://usn.ubuntu.com/usn/usn-3033-1
NVD
Launchpad
Debian

Bugs

https://github.com/libarchive/libarchive/issues/719

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM