Lucene search

K
freebsdFreeBSDFEE94342-4638-11E1-9F47-00E0815B8DA8
HistorySep 28, 2011 - 12:00 a.m.

FreeBSD -- errors handling corrupt compress file in compress(1) and gzip(1)

2011-09-2800:00:00
vuxml.freebsd.org
12

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.9%

Problem Description:
The code used to decompress a file created by compress(1) does not
do sufficient boundary checks on compressed code words, allowing
reference beyond the decompression table, which may result in a
stack overflow or an infinite loop when the decompressor encounters
a corrupted file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 7.3UNKNOWN
FreeBSDanynoarchfreebsd< 7.3_7UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.9%