DEBIAN-CVE-2016-5418 - debian/libarchive
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: pending-human-approval - bulk import