CVE catalog

CVE-2016-10721

partclone: CVE-2016-10721

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.11% · Oct 25, 2026

partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpartclonesid0.3.49-1fixed
Debianpartcloneforky0.3.49-1fixed
Debianpartclonetrixie0.3.36+repack-1fixed
Debianpartclonebookworm0.3.23+repack-1fixed
Ubuntupartclone16.040.2.78-3vulnerable
Ubuntupartclone16.040.2.83-1vulnerable
Ubuntupartclone16.040.2.86-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpartclonesourcesid0.2.88-1not yet assignedNot reportedNot reported
Debianpartclonesourceforky0.2.88-1not yet assignedNot reportedNot reported
Debianpartclonesourcetrixie0.2.88-1not yet assignedNot reportedNot reported
Debianpartclonesourcebookworm0.2.88-1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [partclone]Fixed
    Details (2)

    • 0.3.23+repack-1 · amd64 · bookworm

      Fixed · Fixed: 0.2.88-1

      dsa · partclone · debian · bookworm; dsa · partclone · debian · 12

    • 0.3.23+repack-1 · arm64 · bookworm

      Fixed · Fixed: 0.2.88-1

      dsa · partclone · debian · bookworm; dsa · partclone · debian · 12

[Debian 13 (Trixie)]

  • [partclone]Fixed
    Details (2)

    • 0.3.36+repack-1 · amd64 · trixie

      Fixed · Fixed: 0.2.88-1

      dsa · partclone · debian · 13

    • 0.3.36+repack-1 · arm64 · trixie

      Fixed · Fixed: 0.2.88-1

      dsa · partclone · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]