Bug 1348441 (CVE-2016-4301) - CVE-2016-4301 libarchive: Stack buffer overflow in the mtree parse_device
Summary: CVE-2016-4301 libarchive: Stack buffer overflow in the mtree parse_device
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2016-4301
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 1334215
TreeView+ depends on / blocked
 
Reported: 2016-06-21 07:55 UTC by Andrej Nemec
Modified: 2021-02-17 03:41 UTC (History)
5 users (show)

Fixed In Version: libarchive 3.2.1
Doc Type: Bug Fix
Doc Text:
An exploitable stack based buffer overflow vulnerability exists in the mtree parse_device functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption and potential code execution in the context of the application.
Clone Of:
Environment:
Last Closed: 2016-06-23 03:06:00 UTC
Embargoed:

Attachments (Terms of Use)

Description Andrej Nemec 2016-06-21 07:55:14 UTC 
An exploitable stack based buffer overflow vulnerability exists in the mtree parse_device functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption/code execution. An attacker can send a malformed file to trigger this vulnerability.

External references:

http://www.talosintel.com/reports/TALOS-2016-0153/

Upstream fix:

https://github.com/libarchive/libarchive/commit/a550daeecf6bc689ade371349892ea17b5b97c77
Comment 1 Doran Moppert 2016-06-22 06:16:38 UTC 
Contrary to the Talos advisory, the affected code was only introduced after
the release of v3.1.2.  Thus no Red Hat packages are affected.
Note You need to log in before you can comment on or make changes to this bug.