Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2015-4645

squashfs-tools: integer overflow in read_fragment_table_4

Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow.

CVSS 3.1 · 5.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Fedoraproject Squashfs Project
Products
Fedora Squashfs
CVE-2015-4646

squashfs-tools: stack overflow in read_fragment_table_4 due to fix for CVE-2015-4645

(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.

CVSS 3.1 · 7.5 High EPSS 6.9% KEV · Not listed
Vendors
Squashfs Project
Products
Squashfs
CVE-2012-4024

squashfs-tools: remote arbitrary code execution via crafted list file

Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file (aka a crafted file for the -ef option). NOTE: probably in most cases, the list file is a trusted file constructed by the program's user; however, there are some realistic situations in which a list file would be obtained from an untrusted remote source.

CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed
Vendors
Squashfs Project
Products
Squashfs
CVE-2012-4025

squashfs-tools: integer overflow in queue_init() may lead to abitrary code execution

Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed
Vendors
Squashfs Project
Products
Squashfs