CVE:CVE-2016-7166
CNNVD:CNNVD-201609-193
libarchive是一个多格式存档和压缩库。
libarchive 3.1.901a及之前的版本中存在安全漏洞，该漏洞源于程序没有限制递归解压数。远程攻击者可借助特制的gzip文件利用该漏洞造成拒绝服务（内存损坏和应用程序崩溃）。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade libarchive libarchive to a higher version than 3.1.901a,and avoid the version (,3.1.901a]; Upgrade oracle linux to a higher version than 6,7,and avoid the version 6,7