CVE-2016-4804: Buffer Overflow
The readboot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) readfat function or an out-of-bounds heap read in (2) getfat function.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4804?
CVE-2016-4804 has a high severity rating due to its potential to cause a denial of service through a heap-based buffer overflow.
How do I fix CVE-2016-4804?
To fix CVE-2016-4804, update to dosfstools version 4.0 or later.
Which software is affected by CVE-2016-4804?
CVE-2016-4804 affects dosfstools versions prior to 4.0 and specific versions of openSUSE and Ubuntu Linux.
What type of vulnerability is CVE-2016-4804?
CVE-2016-4804 is a buffer overflow vulnerability that can lead to denial of service.
How can CVE-2016-4804 be exploited?
CVE-2016-4804 can be exploited by attackers using a crafted filesystem that triggers a crash in the affected software.