CVE:CVE-2016-4300
CNNVD:CNNVD-201606-517
libarchive是一个多格式存档和压缩库。
libarchive 3.2.0及之前版本中的archive_read_support_format_7zip.c文件中的‘read_SubStreamsInfo’函数存在整数溢出漏洞。远程攻击者可借助特制的7zip文件利用该漏洞执行任意代码。
solution:Upgrade libarchive libarchive to a higher version than 3.2.0,and avoid the version (,3.2.0]; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0