Lucene search
Veracode Vulnerability DatabaseVERACODE:44181HistoryNov 07, 2023 - 11:16 a.m.
Stack Overflow
2023-11-0711:16:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
libsquashfs vulnerability integer overflow stack overflow error dos application crash unsquash-4.c squashfs_fragment_bytes
libsquashfs.so is vulnerable to Stack Overflow Error. The vulnerability is caused by an integer overflow in function read_fragment_table_4 in a file unsquash-4.c while reading a return value from SQUASHFS_FRAGMENT_BYTES which can be larger than maximum value of a signed int. This can lead to application crash resulting in Denial Of Service (DOS).
| CPE | Name | Operator | Version |
|---|---|---|---|
| libsquashfs.so | le | 1.4.0 | |
| libsquashfs.so | le | 1.4.0 |
Related
nessus
nessus
FreeBSD : squashfs-tools -- Integer overflow (317487c6-85ca-11eb-80fa-14dae938ec40)
2021-03-16 00:00:00
Slackware 14.2 / current : squashfs-tools (SSA:2017-209-01)
2017-07-31 00:00:00
EulerOS 2.0 SP8 : squashfs-tools (EulerOS-SA-2019-2092)
2019-09-30 00:00:00
freebsd
freebsd
squashfs-tools -- Integer overflow
2017-03-17 00:00:00
cve
cve
CVE-2015-4645
2017-03-17 14:59:00
cbl_mariner
cbl_mariner
CVE-2015-4645 affecting package squashfs-tools 4.3-26
2020-09-09 06:09:11
CVE-2015-4645 affecting package squashfs-tools for versions less than 4.5-1
2022-04-09 06:51:41
ubuntucve
ubuntucve
CVE-2015-4645
2017-03-17 00:00:00
prion
prion
Integer overflow
2017-03-17 14:59:00
debiancve
debiancve
CVE-2015-4645
2017-03-17 14:59:00
fedora
fedora
[SECURITY] Fedora 21 Update: squashfs-tools-4.3-11.fc21
2015-07-21 08:13:05
[SECURITY] Fedora 22 Update: squashfs-tools-4.3-11.fc22
2015-07-19 01:57:52
slackware
slackware
[slackware-security] squashfs-tools
2017-07-28 23:06:17
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0335)
2015-10-15 00:00:00
Huawei EulerOS: Security Advisory for squashfs-tools (EulerOS-SA-2019-2092)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for squashfs-tools (EulerOS-SA-2019-2665)
2020-01-23 00:00:00
gentoo
gentoo
SQUASHFS: Multiple vulnerabilities
2017-01-29 00:00:00
mageia
mageia
Updated squashfs-tools packages fix security vulnerabilities
2015-09-08 10:20:40
amazon
amazon
Medium: squashfs-tools
2023-07-17 17:40:00