Lucene search
K

22 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в busybox

The decompressgunzip.c file in BusyBox contains an issue where version 1.32.1 improperly handles the error bit associated with the huftbuild result pointer. This results in an invalid free operation or segmentation fault due to malformed gzip data...

7.5CVSS6.8AI score0.01019EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:3 a.m.3 views

SUSE CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

6.8CVSS8AI score0.07318EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:10 a.m.2 views

SUSE CVE-2015-9261

huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

5.5CVSS6.6AI score0.00811EPSS
Exploits6References10
Redos
Redos
added 2021/09/08 12:0 a.m.28 views

ROS-2-651

2.651 BusyBox Denial of Service CVE-2021-28831 1. Vulnerability Description: A vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to improper handling of the error bit in the huftbuild result pointer in the decopressgunzip.c file. A...

7.5CVSS7.4AI score0.01019EPSS
Exploits0
Gentoo Linux
Gentoo Linux
added 2021/05/26 12:0 a.m.52 views

BusyBox: Denial of service

Background BusyBox is a set of tools for embedded systems and is a replacement for GNU Coreutils. Description It was discovered that BusyBox mishandled the error bit on the huftbuild result pointer when decompressing GZIP compressed data. Impact A remote attacker could entice a user to open a...

7.5CVSS2.5AI score0.01019EPSS
Exploits0
Veracode
Veracode
added 2020/09/21 6:32 a.m.21 views

Denial Of Service (DoS)

busybox is vulnerable to denial of service DoS. huftbuild in archival/libarchive/decompressgunzip.c in BusyBox misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

5.5CVSS2.5AI score0.00811EPSS
Exploits6References15Affected Software3
NVD
NVD
added 2018/07/26 7:29 p.m.14 views

CVE-2015-9261

huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

5.5CVSS7.2AI score0.00811EPSS
Exploits6References15
Prion
Prion
added 2018/07/26 7:29 p.m.20 views

Null pointer dereference

huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

4.3CVSS6.8AI score0.00811EPSS
Exploits6References15Affected Software3
OSV
OSV
added 2018/07/26 7:29 p.m.2 views

DEBIAN-CVE-2015-9261

huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

5.5CVSS6.9AI score0.00811EPSS
Exploits6References1
UbuntuCve
UbuntuCve
added 2018/07/26 12:0 a.m.36 views

CVE-2015-9261

huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

5.5CVSS6.8AI score0.00811EPSS
Exploits6References3
OpenVAS
OpenVAS
added 2010/02/04 12:0 a.m.33 views

GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability (Windows)

This host is installed with GZip and is prone to Input Validation Vulnerability OpenVAS Vulnerability Test $Id: gbgzipinflatedosvulnwin.nasl 5306 2017-02-16 09:00:16Z teissa $ GZip 'huftbuild' in 'inflate.c' Input Validation Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2010...

6.8CVSS9.4AI score0.07318EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2010/02/04 12:0 a.m.73 views

GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability (Linux)

This host is installed with GZip and is prone to Input Validation Vulnerability OpenVAS Vulnerability Test $Id: gbgzipinflatedosvulnlin.nasl 6664 2017-07-11 10:20:11Z cfischer $ GZip 'huftbuild' in 'inflate.c' Input Validation Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2010...

6.8CVSS9.4AI score0.07318EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2010/02/04 12:0 a.m.90 views

GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability - Linux

GZip is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:gzip"; ifdescription...

6.8CVSS9.5AI score0.07318EPSS
Exploits0References5
OSV
OSV
added 2010/01/29 6:30 p.m.7 views

CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

7.7AI score
Exploits0References14
NVD
NVD
added 2010/01/29 6:30 p.m.17 views

CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

6.8CVSS7.6AI score0.07318EPSS
Exploits0References14
Prion
Prion
added 2010/01/29 6:30 p.m.21 views

Design/Logic Flaw

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

6.8CVSS7.8AI score0.09059EPSS
Exploits1References14Affected Software1
Debian CVE
Debian CVE
added 2010/01/29 6:0 p.m.39 views

CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

6.8CVSS7.8AI score0.07318EPSS
Exploits0
Cvelist
Cvelist
added 2010/01/29 6:0 p.m.22 views

CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

9.7AI score0.07318EPSS
Exploits0References14
CVE
CVE
added 2010/01/29 6:0 p.m.111 views

CVE-2009-2624

CVE-2009-2624 affects the GNU gzip utility. The bug is in gzip’s huft_build function (inflate.c) where the Huffman table is allocated too small, enabling a crafted archive to cause a denial of service (crash or infinite loop) and possibly arbitrary code execution. Root cause is a regression from ...

6.8CVSS9.5AI score0.07318EPSS
Exploits0References14Affected Software1
UbuntuCve
UbuntuCve
added 2010/01/20 12:0 a.m.30 views

CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

6.8CVSS6.1AI score0.07318EPSS
Exploits0References2
Rows per page
Query Builder