What is CVE-2016-10721?

CVE-2016-10721 is a critical-severity vulnerability in Partclone, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2018-05-02.

How severe is CVE-2016-10721?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Partclone

CVE-2016-10721

partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

Vulnerability class: Buffer Overflow

EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Partclone — versions 0.2.87
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2016-10721?: CVE-2016-10721 is a critical-severity vulnerability in Partclone, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2018-05-02.
How severe is CVE-2016-10721?: Critical severity. CVSS v3 base score is 9.8 out of 10.