Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2014-9556

Published: 3 February 2015

Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.

From the Ubuntu Security Team

It was discovered that cabextract incorrectly handled certain malformed CAB files. An attacker could use this issue to cause cabextract to hang, resulting in a denial of service.

Priority

Medium

Status

Package Release Status
cabextract
Launchpad, Ubuntu, Debian
artful Ignored
(reached end-of-life)
bionic Not vulnerable
(1.6-1.1)
cosmic Not vulnerable
(1.6-1.1)
disco Not vulnerable
(1.6-1.1)
eoan Not vulnerable
(1.6-1.1)
focal Not vulnerable
(1.6-1.1)
groovy Not vulnerable
(1.6-1.1)
hirsute Not vulnerable
(1.6-1.1)
impish Not vulnerable
(1.6-1.1)
jammy Not vulnerable
(1.6-1.1)
lucid Ignored
(reached end-of-life)
precise Does not exist
(precise was needed)
trusty
Released (1.4-4ubuntu0.1~esm1)
upstream
Released (1.4-5)
utopic Ignored
(reached end-of-life)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
xenial Not vulnerable
(1.6-1)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
libmspack
Launchpad, Ubuntu, Debian
artful Not vulnerable
(0.4-3)
bionic Not vulnerable
(0.4-3)
cosmic Not vulnerable
(0.4-3)
disco Not vulnerable
(0.4-3)
eoan Not vulnerable
(0.4-3)
focal Not vulnerable
(0.4-3)
groovy Not vulnerable
(0.4-3)
hirsute Not vulnerable
(0.4-3)
impish Not vulnerable
(0.4-3)
jammy Not vulnerable
(0.4-3)
lucid Does not exist

precise Does not exist

trusty
Released (0.4-1ubuntu0.1~esm1)
upstream
Released (0.4-2)
utopic Ignored
(reached end-of-life)
vivid Not vulnerable
(0.4-3)
wily Not vulnerable
(0.4-3)
xenial Not vulnerable
(0.4-3)
yakkety Not vulnerable
(0.4-3)
zesty Not vulnerable
(0.4-3)