CVE-2017-14166

libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive…

published September 6, 2017

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02770 · 86.1th percentile
Published
2017-09-06T18:00Z
EPSS history
Timeline
  • 06 SEP 18:00Z
    libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive…
    cvelistv5