CVE-2016-10349

Name of the Vulnerable Software and Affected Versions libarchive version 3.2.2

Description The issue is related to the archive le32dec function in archive endian.h, which allows remote attackers to cause a denial of service. This can be achieved through a crafted file, leading to a heap-based buffer over-read and application crash. The vulnerability is associated with a dynamic buffer overflow.

Recommendations For libarchive version 3.2.2, consider updating to a newer version that contains a fix for this issue, as the current version is affected by a dynamic buffer overflow vulnerability in the archive le32dec function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.