Vulnerability in Freebsd
CVE-2006-5680
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.
EPSS: 0.016 (73.1th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 6
- N/a — versions n/a
References
- secteam@freebsd.org (vdb-entry, x_refsource_SECTRACK)
- secteam@freebsd.org (vdb-entry, x_refsource_XF)
- secteam@freebsd.org (x_refsource_SECUNIA, third-party-advisory)
- secteam@freebsd.org (x_refsource_SECUNIA, third-party-advisory)
- secteam@freebsd.org (x_refsource_FREEBSD, Exploit, vendor-advisory, Vendor Advisory)
- secteam@freebsd.org (vdb-entry, x_refsource_BID)