CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

• CWE-19
• CWE-20

• http://rhn.redhat.com/errata/RHSA-2016-1844.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-1850.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2016/08/09/2Exploit, Technical Description
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlThird Party Advisory
• http://www.securityfocus.com/bid/93165
• https://access.redhat.com/errata/RHSA-2016:1852Third Party Advisory
• https://access.redhat.com/errata/RHSA-2016:1853Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1362601Issue Tracking, Third Party Advisory, VDB Entry
• https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4fExploit, Technical Description
• https://github.com/libarchive/libarchive/commit/dfd6b54ce33960e420fb206d8872fb759b577ad9Patch
• https://github.com/libarchive/libarchive/issues/746Exploit, Patch
• https://security.gentoo.org/glsa/201701-03
• http://rhn.redhat.com/errata/RHSA-2016-1844.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-1850.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2016/08/09/2Exploit, Technical Description
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlThird Party Advisory
• http://www.securityfocus.com/bid/93165
• https://access.redhat.com/errata/RHSA-2016:1852Third Party Advisory
• https://access.redhat.com/errata/RHSA-2016:1853Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1362601Issue Tracking, Third Party Advisory, VDB Entry
• https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4fExploit, Technical Description
• https://github.com/libarchive/libarchive/commit/dfd6b54ce33960e420fb206d8872fb759b577ad9Patch
• https://github.com/libarchive/libarchive/issues/746Exploit, Patch
• https://security.gentoo.org/glsa/201701-03

Published

Sep 21, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5412arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel …
• CVE-2016-5413Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5414FreeIPA 4.4.0 allows remote attackers to request an arbitrar…
• CVE-2016-5415Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5416389 Directory Server in Red Hat Enterprise Linux Desktop 6 t…
• CVE-2016-5417Memory leak in the __res_vinit function in the IPv6 name ser…
• CVE-2016-5419curl and libcurl before 7.50.1 do not prevent TLS session re…
• CVE-2016-5420curl and libcurl before 7.50.1 do not check the client certi…
• CVE-2016-5421Use-after-free vulnerability in libcurl before 7.50.1 allows…8.1
• CVE-2016-5422The web console in Red Hat JBoss Operations Network (JON) be…
• CVE-2016-5423PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before …
• CVE-2016-5424PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before …