p PatchFirst

CVE-2016-9888

CVE-2016-9888

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file.

CVSS 5.5 · Medium · EPSS 1.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libgsf Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.14.41-1

    Update to 1.14.41-1

  • libgsf Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.14.41-1

    Update to 1.14.41-1

  • libgsf Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.14.41-1

    Update to 1.14.41-1

  • libgsf Ubuntu:14.04:LTS

    Versions
    • 1.14.27-2ubuntu1
    • 1.14.27-2ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libgsf Ubuntu:16.04:LTS

    Versions
    • 1.14.34-1
    • 1.14.34-2
    • 1.14.35-1
    • 1.14.36-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →