Red Hat Security AdvisoryRHSA-2006:0663
ncompress security update
Released 2006-09-12 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 ncompress-4.2.4-39.rhel3, ncompress-4.2.4-39.rhel3.i386
- Red Hat Enterprise Linux AS version 3 ncompress-4.2.4-39.rhel3, ncompress-4.2.4-39.rhel3.i386, ncompress-4.2.4-39.rhel3.ia64 +1
- Red Hat Enterprise Linux AS version 4 ncompress-4.2.4-43.rhel4, ncompress-4.2.4-43.rhel4.i386, ncompress-4.2.4-43.rhel4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 ncompress-4.2.4-43.rhel4, ncompress-4.2.4-43.rhel4.i386
- Red Hat Enterprise Linux ES version 3 ncompress-4.2.4-39.rhel3, ncompress-4.2.4-39.rhel3.i386, ncompress-4.2.4-39.rhel3.ia64
- Red Hat Enterprise Linux ES version 4 ncompress-4.2.4-43.rhel4, ncompress-4.2.4-43.rhel4.i386, ncompress-4.2.4-43.rhel4.ia64
- Red Hat Enterprise Linux WS version 3 ncompress-4.2.4-39.rhel3, ncompress-4.2.4-39.rhel3.i386, ncompress-4.2.4-39.rhel3.ia64
- Red Hat Enterprise Linux WS version 4 ncompress-4.2.4-43.rhel4, ncompress-4.2.4-43.rhel4.i386, ncompress-4.2.4-43.rhel4.ia64
Fixes 1 record
Priority MEDIUM 42
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer und…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05817 · Published 2006-08-14 · Fixed
