Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5844
Reference (s):
- BID:91808
- URL: http://www.securityfocus.com/bid/91808
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1350280