CVE-2016-2334: 7-zip

CVSS: 9.3v2.0HighModified

AliasesUBUNTU-CVE-2016-2334DEBIAN-CVE-2016-2334

Published 13-12-2016Last modified 05-08-2024

Vulnerability summary

CVE-2016-2334 is a high (CVSS 9.3) vulnerability in 7-zip. EPSS estimates a 14.74% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

14.74%

0%100%

Medium · -4.86 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10322-1

Timeline

13-12-2016
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.07.8v2.09.3

EPSS trend

Probability

14.74%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

-4.86 pp

From 19.60% on 21-09-2026

21-09-202621-10-2026

EPSS score

14.74%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (talosintel.com)
Maturity: unknown
referenceUnverified
Exploit Reference (blog.talosintel.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

7-zip1 product

7-zip≤ 15.14

Debian1 product

p7zip< 15.14.1+dfsg-2

Fedoraproject1 product

fedoraEOL23 | 24

Ubuntu1 product

p7zip< 16.02+dfsg-6

4 vendors · 4 products

References

13 links

lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
blog.talosintelligence.com/2017/11/exploiting-cve-2016-2334.htmlX Refsource MISC
www.talosintel.com/reports/TALOS-2016-0093/X Refsource MISCExploitThird Party AdvisoryREPORT
blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.htmlX Refsource MISCExploitThird Party Advisory
www.securityfocus.com/bid/90531VDB EntryX Refsource BIDThird Party Advisory
security.gentoo.org/glsa/201701-27Vendor AdvisoryX Refsource GENTOO
www.securitytracker.com/id/1035876VDB EntryX Refsource SECTRACKThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.htmlX Refsource CONFIRMPatchThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
ubuntu.com/security/CVE-2016-2334REPORT

Show all 13 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities