Scientific Linux Security Update : libarchive on SL7.x x86_64

This script is Copyright (C) 2016 Tenable Network Security, Inc.


Synopsis :

The remote Scientific Linux host is missing one or more security
updates.

Description :

Security Fix(es) :

- A flaw was found in the way libarchive handled hardlink
archive entries of non-zero size. Combined with flaws in
libarchive's file system sandboxing, this issue could
cause an application using libarchive to overwrite
arbitrary files with arbitrary data from the archive.
(CVE-2016-5418)

- Multiple out-of-bounds write flaws were found in
libarchive. Specially crafted ZIP, 7ZIP, or RAR files
could cause a heap overflow, potentially allowing code
execution in the context of the application using
libarchive. (CVE-2016-1541, CVE-2016-4300,
CVE-2016-4302)

- Multiple out-of-bounds read flaws were found in
libarchive. Specially crafted LZA/LZH, AR, MTREE, ZIP,
TAR, or RAR files could cause the application to read
data out of bounds, potentially disclosing a small
amount of application memory, or causing an application
crash. (CVE-2015-8919, CVE-2015-8920, CVE-2015-8921,
CVE-2015-8923, CVE-2015-8924, CVE-2015-8925,
CVE-2015-8926, CVE-2015-8928, CVE-2015-8934)

- Multiple NULL pointer dereference flaws were found in
libarchive. Specially crafted RAR, CAB, or 7ZIP files
could cause an application using libarchive to crash.
(CVE-2015-8916, CVE-2015-8917, CVE-2015-8922)

- Multiple infinite loop / resource exhaustion flaws were
found in libarchive. Specially crafted GZIP or ISO files
could cause the application to consume an excessive
amount of resources, eventually leading to a crash on
memory exhaustion. (CVE-2016-7166, CVE-2015-8930)

- A denial of service vulnerability was found in
libarchive. A specially crafted CPIO archive containing
a symbolic link to a large target path could cause
memory allocation to fail, causing an application using
libarchive that attempted to view or extract such
archive to crash. (CVE-2016-4809)

- An integer overflow flaw, leading to a buffer overflow,
was found in libarchive's construction of ISO9660
volumes. Attempting to create an ISO9660 volume with 2
GB or 4 GB file names could cause the application to
attempt to allocate 20 GB of memory. If this were to
succeed, it could lead to an out of bounds write on the
heap and potential code execution. (CVE-2016-6250)

- Multiple instances of undefined behavior due to
arithmetic overflow were found in libarchive. Specially
crafted MTREE archives, Compress streams, or ISO9660
volumes could potentially cause the application to fail
to read the archive, or to crash. (CVE-2015-8931,
CVE-2015-8932, CVE-2016-5844)

See also :

http://www.nessus.org/u?04db530f

Solution :

Update the affected packages.

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)