« List of all CVEs

CVE-2016-7166

Published: 9/21/2016 Last updated: 8/6/2024 Reserved: 9/8/2016

libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-cpio

Products affected (1)

Product Vendor Version
n/a n/a Prior to iMC PLAT 7.3 (E0705P07)

References (22)