CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to…

published September 21, 2016

CVSS
—
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04669 · 91.7th percentile
Published
2016-09-21T14:00Z
EPSS history
Timeline
  • 21 SEP 14:00Z
    The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to…
    cvelistv5