{"id":"CVE-2016-2335","aliases":["DEBIAN-CVE-2016-2335","DLA-510-1","DSA-3599-1","EUVD-2016-3419","GHSA-p2xg-m23c-2mm9","MGASA-2016-0202","SUSE-SU-2016:1593-1","UBUNTU-CVE-2016-2335","USN-3913-1","openSUSE-SU-2024:10322-1"],"status":"published","title":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and...","description":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09795,"percentile":0.95576,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-05-21T22:11:24Z","modified":"2026-09-22T07:02:57Z","fixes":[{"ecosystem":"Debian:12","package":"p7zip","fixed_in":["15.14.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"p7zip","fixed_in":["15.14.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"p7zip","fixed_in":["9.20.1~dfsg.1-4+deb7u2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"p7zip","fixed_in":["9.20.1~dfsg.1-4.1+deb8u2"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"p7zip","fixed_in":["9.20.1-6.2.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"p7zip","fixed_in":["9.20.1-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"p7zip","fixed_in":["9.20.1-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"p7zip","fixed_in":["9.20.1-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"p7zip","fixed_in":["9.20.1-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"p7zip","fixed_in":["9.20.1-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"p7zip","fixed_in":["9.20.1-6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"p7zip","fixed_in":["9.20.1~dfsg.1-4+deb7u2build0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"p7zip","fixed_in":["9.20.1~dfsg.1-4.2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.14.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.14.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1~dfsg.1-4+deb7u2"}]}],"versions":["9.20.1~dfsg.1-4","9.20.1~dfsg.1-4+deb7u1"]},{"source":"osv","ecosystem":"Debian:8","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1~dfsg.1-4.1+deb8u2"}]}],"versions":["9.20.1~dfsg.1-4.1","9.20.1~dfsg.1-4.1+deb8u1"]},{"source":"osv","ecosystem":"Mageia:5","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-6.2.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1~dfsg.1-4+deb7u2build0.14.04.1"}]}],"versions":["9.20.1~dfsg.1-4","9.20.1~dfsg.1-4+deb7u1build0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1~dfsg.1-4.2ubuntu0.1"}]}],"versions":["9.20.1~dfsg.1-4.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1~dfsg.1-4.2ubuntu0.1"}]}],"versions":["9.20.1~dfsg.1-4.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-2.1"}]}],"bundled":4}],"products":[{"vendor":"7-zip","product":"7-zip"},{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"opensuse"}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00069.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTGWICT3KYYDPDXRNO5SXD32GZICGRIR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"http://www.securityfocus.com/bid/90531","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201701-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1035876","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00098.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0094/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"http://www.debian.org/security/2016/dsa-3599","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNYIQAU3FKFBNFPK6GKYTSVRHQA7PTYT/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/3913-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2335"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNYIQAU3FKFBNFPK6GKYTSVRHQA7PTYT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTGWICT3KYYDPDXRNO5SXD32GZICGRIR"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNYIQAU3FKFBNFPK6GKYTSVRHQA7PTYT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTGWICT3KYYDPDXRNO5SXD32GZICGRIR"},{"url":"https://usn.ubuntu.com/3913-1"},{"url":"http://www.talosintel.com/reports/TALOS-2016-0094"},{"url":"https://github.com/advisories/GHSA-p2xg-m23c-2mm9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-2335","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0202.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18490","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161593-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/979823","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2335","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-2335","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3913-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17969","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9296","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-2335","description":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.","status":"published","published":"2016-06-07T14:00:00Z","modified":"2024-08-05T23:24:49.056Z","updated_at":"2026-11-02T14:33:33.424551Z"}],"euvd":[{"id":"EUVD-2016-3419","description":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.","status":"published","published":"2016-06-07T14:00:00Z","modified":"2024-08-05T23:24:49Z","updated_at":"2026-11-03T02:22:53.601545Z"}],"ghsa":[{"id":"GHSA-p2xg-m23c-2mm9","title":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and...","description":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.","status":"published","published":"2022-05-14T01:17:54Z","modified":"2025-04-12T13:01:50Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:28.050499Z"}],"nvd":[{"id":"CVE-2016-2335","description":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.","status":"published","published":"2016-06-07T14:06:12.293Z","modified":"2026-06-17T00:43:50.663Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:26.642445Z"}],"osv":[{"id":"CVE-2016-2335","description":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.","status":"published","published":"2016-06-07T14:06:12.293Z","modified":"2026-04-16T06:17:07.989680864Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-2335","description":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.","status":"published","published":"2016-06-07T14:06:12.293Z","modified":"2026-09-22T07:02:57.804593624Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-2335","description":"The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.","status":"published","published":"2016-06-07T00:00:00Z","modified":"2026-02-04T03:01:07.057885Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"DLA-510-1","title":"p7zip - security update","status":"published","published":"2016-06-10T00:00:00Z","modified":"2026-03-09T02:10:49.84718Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3599-1","title":"p7zip - security update","status":"published","published":"2016-06-09T00:00:00Z","modified":"2026-03-09T02:10:31.898979Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0202","title":"Updated p7zip packages fix CVE-2016-2335","description":"Updated p7zip package fixes security vulnerability:\n\nAn out of bound read vulnerability exists in the CInArchive::ReadFileItem\nmethod functionality of 7zip for handling UDF files that can lead to denial of\nservice or code execution (CVE-2016-2335).\n","status":"published","published":"2016-05-21T22:11:24Z","modified":"2026-04-16T06:26:04.284904039Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10322-1","title":"p7zip-16.02-2.1 on GA media","description":"These are all security issues fixed in the p7zip-16.02-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:36:07.754244Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:1593-1","title":"Security update for p7zip","description":"\nThis update for p7zip fixes the following issues: \n\n- add p7zip-9.20.1-CVE-2016-2335.patch to fix 7zip UDF\n  CInArchive::ReadFileItem code execution vulnerability\n  [bsc#979823], [CVE-2016-2335]\n","status":"published","published":"2016-06-16T06:06:08Z","modified":"2026-02-04T04:06:33.379679Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3913-1","title":"p7zip vulnerabilities","description":"It was discovered that p7zip did not correctly handle certain malformed\narchives. If a user or automated system were tricked into processing a specially\ncrafted archive with p7zip, then p7zip could be made to crash, possibly leading\nto abitrary code execution.\n","status":"published","published":"2019-03-21T17:09:19Z","modified":"2026-02-10T04:41:29Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}