2 matches found
PT-2021-2871 · Busybox +4 · Busybox +4
Name of the Vulnerable Software and Affected Versions: BusyBox versions 1.32.1 and earlier Description: The issue is related to the decompress gunzip.c file in BusyBox, which mishandles the error bit on the huft build result pointer. This can lead to an invalid free or segmentation fault when...
DEBIAN-CVE-2009-2624
The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...