CVE-2016-4302: Libarchive

High severity, CVSS 7.8. EPSS: 4.8% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.

Affected products

• Libarchive Libarchive: up to and including 3.2.0
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Hpc Node: version 7.0 only
• Red Hat Enterprise Linux Hpc Node Eus: version 7.2 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Server Aus: version 7.2 only
• Red Hat Enterprise Linux Server Eus: version 7.2 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2016-09-21. Last modified 2026-06-17.