gnu gzip 1.2.4a vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow malicious users to execute code via a long file name, possibly remotely if gzip is run on an FTP server.

Gnu Gzip 1.3 Gnu Gzip 1.2.4a Gnu Gzip 1.2.4

1 Github repository

2.1

CVSSv2

The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.

Gnu Gzip 1.2.4a

6.8

CVSSv2

The huft_build function in inflate.c in gzip prior to 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote malicious users to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive. NOTE...

Gnu Gzip 1.3.6 Gnu Gzip 1.3.5 Gnu Gzip Gnu Gzip 1.3.10 Gnu Gzip 1.3 Gnu Gzip 1.3.2 Gnu Gzip 1.3.1 Gnu Gzip 1.3.9 Gnu Gzip 1.3.8 Gnu Gzip 1.3.7 Gnu Gzip 1.2.4 Gnu Gzip 1.2.4a Gnu Gzip 1.3.11 Gnu Gzip 1.3.4 Gnu Gzip 1.3.3

6.8

CVSSv2

Integer underflow in the unlzw function in unlzw.c in gzip prior to 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses...

Gnu Gzip Gnu Gzip 1.3.12 Gnu Gzip 1.3.1 Gnu Gzip 1.3.8 Gnu Gzip 1.3 Gnu Gzip 1.3.3 Gnu Gzip 1.3.11 Gnu Gzip 1.3.6 Gnu Gzip 1.3.2 Gnu Gzip 1.2.4 Gnu Gzip 1.3.10 Gnu Gzip 1.3.5 Gnu Gzip 1.3.7 Gnu Gzip 1.2.4a Gnu Gzip 1.3.9 Gnu Gzip 1.3.4

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook