CVE-2016-4804 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-4804 Interim 1 39 2025-03-25T01:12:47Z current 2021-05-30T13:42:29Z 2025-03-25T01:12:47Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-4804 The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-August/002224.html E-Mail link for SUSE-SU-2016:2145-1 https://lists.suse.com/pipermail/sle-security-updates/2016-August/002225.html E-Mail link for SUSE-SU-2016:2146-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 dosfstools dosfstools-2.11-121.31.4.1 dosfstools-3.0.26-3.1 dosfstools-3.0.26-6.5 dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-Azure-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-EC2-HVM-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-GCE-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-OCI-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-Azure dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-Azure-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-EC2-HVM dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-GCE dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-GCE-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP4-SAP-OCI-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-Azure-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-Azure-Basic-On-Demand dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-Azure-HPC-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-Azure-HPC-On-Demand dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-Azure-SAP-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-Azure-SAP-On-Demand dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-Azure-Standard-On-Demand dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-EC2-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-EC2-On-Demand dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-EC2-SAP-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-EC2-SAP-On-Demand dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-GCE-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-GCE-On-Demand dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-GCE-SAP-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-GCE-SAP-On-Demand dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-OCI-BYOS-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production dosfstools-3.0.26-6.5 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Desktop 12 SP1 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Desktop 12 SP2 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Desktop 12 SP3 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Desktop 12 SP4 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 dosfstools-2.11-121.31.4.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA dosfstools-3.0.26-3.1 as a component of SUSE Linux Enterprise Server 11 SP4 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Server 12 SP1 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Server 12 SP2 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Server 12 SP3 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Server 12 SP4 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Server 12 SP5 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 dosfstools-3.0.26-3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 dosfstools-3.0.26-6.5 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 dosfstools as a component of HPE Helion OpenStack 8 dosfstools as a component of SUSE CaaS Platform 4.5 dosfstools as a component of SUSE Enterprise Storage 7 dosfstools as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 dosfstools as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS dosfstools as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS dosfstools as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS dosfstools as a component of SUSE Linux Enterprise Micro 5.0 dosfstools as a component of SUSE Linux Enterprise Micro 5.1 dosfstools as a component of SUSE Linux Enterprise Micro 5.2 dosfstools as a component of SUSE Linux Enterprise Micro 5.3 dosfstools as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 dosfstools as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 dosfstools as a component of SUSE Linux Enterprise Real Time 15 SP2 dosfstools as a component of SUSE Linux Enterprise Server 11 SP4 LTSS dosfstools as a component of SUSE Linux Enterprise Server 12 SP2-BCL dosfstools as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS dosfstools as a component of SUSE Linux Enterprise Server 12 SP4-LTSS dosfstools as a component of SUSE Linux Enterprise Server 12 SP5 dosfstools as a component of SUSE Linux Enterprise Server 15 SP2-LTSS dosfstools as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 dosfstools as a component of SUSE Linux Enterprise Server Teradata 12 SP3 dosfstools as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 dosfstools as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 dosfstools as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 dosfstools as a component of SUSE Manager Proxy 4.1 dosfstools as a component of SUSE Manager Retail Branch Server 4.1 dosfstools as a component of SUSE Manager Server 4.1 dosfstools as a component of SUSE OpenStack Cloud 8 dosfstools as a component of SUSE OpenStack Cloud 9 dosfstools as a component of SUSE OpenStack Cloud Crowbar 8 dosfstools as a component of SUSE OpenStack Cloud Crowbar 9 The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function. CVE-2016-4804 Image SLES12-SP4-Azure-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP4-EC2-HVM-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP4-GCE-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP4-OCI-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-Azure:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-Azure-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-EC2-HVM:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-EC2-HVM-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-GCE:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-GCE-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP4-SAP-OCI-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-Azure-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-Azure-Basic-On-Demand:dosfstools-3.0.26-6.5 Image SLES12-SP5-Azure-HPC-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-Azure-HPC-On-Demand:dosfstools-3.0.26-6.5 Image SLES12-SP5-Azure-SAP-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-Azure-SAP-On-Demand:dosfstools-3.0.26-6.5 Image SLES12-SP5-Azure-Standard-On-Demand:dosfstools-3.0.26-6.5 Image SLES12-SP5-EC2-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-EC2-On-Demand:dosfstools-3.0.26-6.5 Image SLES12-SP5-EC2-SAP-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-EC2-SAP-On-Demand:dosfstools-3.0.26-6.5 Image SLES12-SP5-GCE-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-GCE-On-Demand:dosfstools-3.0.26-6.5 Image SLES12-SP5-GCE-SAP-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-GCE-SAP-On-Demand:dosfstools-3.0.26-6.5 Image SLES12-SP5-OCI-BYOS-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:dosfstools-3.0.26-6.5 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dosfstools-3.0.26-6.5 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Desktop 12 SP1:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Desktop 12 SP2:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Desktop 12 SP3:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Desktop 12 SP4:dosfstools-3.0.26-6.5 SUSE Linux Enterprise High Performance Computing 12 SP5:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Server 11 SP3-TERADATA:dosfstools-2.11-121.31.4.1 SUSE Linux Enterprise Server 11 SP4:dosfstools-3.0.26-3.1 SUSE Linux Enterprise Server 12 SP1:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Server 12 SP2:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Server 12 SP3:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Server 12 SP4:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Server 12 SP5:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Server for SAP Applications 11 SP4:dosfstools-3.0.26-3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:dosfstools-3.0.26-6.5 SUSE Linux Enterprise Server for SAP Applications 12 SP5:dosfstools-3.0.26-6.5 SUSE CaaS Platform 4.5:dosfstools SUSE Enterprise Storage 7:dosfstools SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:dosfstools SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:dosfstools SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:dosfstools SUSE Linux Enterprise Micro 5.0:dosfstools SUSE Linux Enterprise Micro 5.1:dosfstools SUSE Linux Enterprise Micro 5.2:dosfstools SUSE Linux Enterprise Micro 5.3:dosfstools SUSE Linux Enterprise Module for Basesystem 15 SP3:dosfstools SUSE Linux Enterprise Module for Basesystem 15 SP4:dosfstools SUSE Linux Enterprise Real Time 15 SP2:dosfstools SUSE Linux Enterprise Server 15 SP2-LTSS:dosfstools SUSE Linux Enterprise Server Business Critical Linux 15 SP2:dosfstools SUSE Linux Enterprise Server for SAP Applications 15 SP2:dosfstools SUSE Manager Proxy 4.1:dosfstools SUSE Manager Retail Branch Server 4.1:dosfstools SUSE Manager Server 4.1:dosfstools low 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H