CVE-2016-10209: Null Pointer Dereference
CVE-2016-10350 The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. CVE-2016-10349 The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
Other sources
The archivewstringappendfrommbs function in archivestring.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10209?
CVE-2016-10209 has a medium severity as it can lead to a denial of service due to a heap-based buffer over-read.
How do I fix CVE-2016-10209?
To fix CVE-2016-10209, update libarchive to a version that is not vulnerable, such as 3.1.2-7ubuntu2.6 or later.
Which software is affected by CVE-2016-10209?
CVE-2016-10209 affects various versions of libarchive, particularly versions up to 3.2.2, and certain versions of F5 BIG-IP.
Can CVE-2016-10209 be exploited remotely?
Yes, CVE-2016-10209 can be exploited remotely through the opening of crafted files.
What types of issues does CVE-2016-10209 cause?
CVE-2016-10209 can cause application crashes and denial of service due to improper handling of crafted files.