FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-5680

This CVE name corresponds to:

Entered	Topic
2007-02-26	libarchive -- Infinite loop in corrupt archives handling in libarchive

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-5680 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-5680
Phase	Assigned(20061103)

Description

The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.

References

Source	Reference
FREEBSD	FreeBSD-SA-06:24
BID	20961
SECTRACK	1017199
SECUNIA	22723
SECUNIA	22801
XF	freebsd-libarchive-file-dos(30137)