VDB
BDU%3A2018-00022
BDU%3A2018-00022
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость метода CInArchive::ReadFileItem (Archive/Udf/UdfIn.cpp) архиватора p7zip, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., ООО «РусБИТех-Астра», Сообщество свободного программного обеспечения | openSUSE, Astra Linux Special Edition (запись в едином реестре российских программ №369), p7zip, Debian GNU/Linux |
Timeline
- Jan 12, 2018 CVE Published
- Mar 23, 2021 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2016-2335 url
- https://security-tracker.debian.org/tracker/CVE-2016-2335 url
- http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html url
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00004.html url
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00098.html url
- http://lists.opensuse.org/opensuse-updates/2016-07/msg00069.html url
- http://www.debian.org/security/2016/dsa-3599 url
- http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html url
- http://www.securityfocus.com/bid/90531 url
- http://www.securitytracker.com/id/1035876 url
- http://www.talosintel.com/reports/TALOS-2016-0094/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNYIQAU3FKFBNFPK6GKYTSVRHQA7PTYT/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTGWICT3KYYDPDXRNO5SXD32GZICGRIR/ url
- https://security.gentoo.org/glsa/201701-27 url