Published: 17/03/2017 Updated: 24/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote malicious users to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
squashfs project squashfs
fedoraproject fedora 21
fedoraproject fedora 22

Debian Bug report logs - #793467 squashfs-tools: CVE-2015-4645 Package: src:squashfs-tools; Maintainer for src:squashfs-tools is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Romeo Papa <romeopapa@caramailcom> Date: Fri, 24 Jul 2015 10:12:02 UTC Severity: normal Tags: security, upstream Found in version s ...

Debian Bug report logs - #793468 squashfs-tools: CVE-2015-4646 Package: src:squashfs-tools; Maintainer for src:squashfs-tools is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Romeo Papa <romeopapa@caramailcom> Date: Fri, 24 Jul 2015 10:15:01 UTC Severity: normal Tags: patch, security, upstream Found in ve ...

Integer overflow in the read_fragment_table_4 function in unsquash-4c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow (CVE-2015-4645) (1) unsquash-1c, (2) unsquash-2c, (3) unsquash-3c, and (4) unsquash-4c in Squashfs and sasqua ...

Integer overflow in the read_fragment_table_4 function in unsquash-4c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow ...

CWE-190 https://security.gentoo.org/glsa/201701-73 https://github.com/devttys0/sasquatch/pull/5 https://bugzilla.redhat.com/show_bug.cgi?id=1234886 http://www.securityfocus.com/bid/75272 http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162226.html http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162171.html https://github.com/plougher/squashfs-tools/commit/f95864afe8833fe3ad782d714b41378e860977b1 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793467 https://alas.aws.amazon.com/AL2/ALAS-2023-2152.html

CVE-2015-4645

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect