Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input which triggers a stack-based buffer overflow.

...

AZL-6884 CVE-2015-4645 affecting package squashfs-tools for versions less than 4.5-1

Integer overflow in the readfragmenttable4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service application crash via a crafted input, which triggers a stack-based buffer overflow...

DEBIAN-CVE-2015-4645

Integer overflow in the readfragmenttable4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service application crash via a crafted input, which triggers a stack-based buffer overflow...

PT-2017-6776 · Sasquatch +3 · Sasquatch +3

Name of the Vulnerable Software and Affected Versions: Squashfs affected versions not specified sasquatch affected versions not specified Description: The issue is related to an integer overflow in the read fragment table 4 function, which can be triggered by a crafted input. This leads to a...