This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-6250 →

DEBIAN-CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute...

Original description

The description as published by the source.

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libarchive

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-1"}]}]

Debian:13 libarchive

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-1"}]}]

Debian:14 libarchive

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-1"}]}]

References

advisory security-tracker.debian.org