CVE-2016-5418: libarchive Data Processing Errors
CVSS: 7.5v3.0HighModified
AliasesMGASA-2016-0318RHSA-2016:1852RHSA-2016:1853UBUNTU-CVE-2016-5418DEBIAN-CVE-2016-5418DLA-657-1
Published 21-09-2016Last modified 06-08-2024
Vulnerability summary
CVE-2016-5418 is a high (CVSS 7.5) Data Processing Errors vulnerability in libarchive. EPSS estimates a 4.67% chance of exploitation in the next 30 days, higher than 91.6% of scored vulnerabilities. 3 public exploits are recorded.
CVSS score
7.5/10
010
High · v3.0 (NVD)EPSS score
4.67%
0%100%
Low · -0.04 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits3github, reference
Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 21-09-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
CVSS metrics
5 scores · 4 sources · 2 versionsHigh 7.5Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NSourcesAll 4 agree
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Medium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:P/A:NSourcesSingle source
EPSS trend
Probability
4.67%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
-0.04 pp
From 4.71% on 18-09-2026
18-09-202618-10-2026
EPSS score4.67%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundE48209B03F1Dd9625A992717E7B89C4F
Maturity: poc
Libarchive
Maturity: poc
Exploit Reference (openwall.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-19Data Processing ErrorsWeaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.
- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Affected systems
Redhat27 products
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_hpc_node6.0 | 7.0
- enterprise_linux_hpc_node_eus7.2
- enterprise_linux_server6.0 | 7.0
- enterprise_linux_server_aus7.2
Debian1 product
- libarchive< 3.2.1-4 | < 3.0.4-3+wheezy4
Libarchive1 product
- libarchive≤ 3.2.0
Mageia1 product
- libarchive< 3.2.1-1.2.mga5
Oracle1 product
- linuxEOL6 | 7
Ubuntu1 product
- libarchive< 3.1.2-7ubuntu2.4 | < 3.1.2-11ubuntu0.16.04.3
6 vendors · 32 products
References
39 links- bugzilla.redhat.com/show_bug.cgi?id=1362601X Refsource CONFIRMIssue TrackingThird Party AdvisoryVDB EntryREPORT
- access.redhat.com/errata/RHSA-2016:1852Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2016:1853Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- github.com/libarchive/libarchive/commit/dfd6b54ce33960e420fb206d8872fb759b577ad9X Refsource CONFIRMPatch
- www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlX Refsource CONFIRMThird Party Advisory
- gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4fX Refsource MISCExploitTechnical Description
Show all 39 references
- www.openwall.com/lists/oss-security/2016/08/09/2Mailing ListX Refsource MLISTExploitTechnical Description
