Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!Close

CVE-2014-9556

Published: 3 February 2015

Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.

From the Ubuntu Security Team

It was discovered that cabextract incorrectly handled certain malformed CAB files. An attacker could use this issue to cause cabextract to hang, resulting in a denial of service.

Priority

Medium

Status

Package Release Status
cabextract
Launchpad, Ubuntu, Debian
artful Ignored
(end of life)
bionic Not vulnerable
(1.6-1.1)
cosmic Not vulnerable
(1.6-1.1)
disco Not vulnerable
(1.6-1.1)
eoan Not vulnerable
(1.6-1.1)
focal Not vulnerable
(1.6-1.1)
impish Not vulnerable
(1.6-1.1)
lucid Ignored
(end of life)
precise Ignored
(end of life)
trusty
Released (1.4-4ubuntu0.1~esm1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
upstream
Released (1.4-5)
utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Not vulnerable
(1.6-1)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
groovy Not vulnerable
(1.6-1.1)
hirsute Not vulnerable
(1.6-1.1)
jammy Not vulnerable
(1.6-1.1)
libmspack
Launchpad, Ubuntu, Debian
artful Not vulnerable
(0.4-3)
bionic Not vulnerable
(0.4-3)
cosmic Not vulnerable
(0.4-3)
disco Not vulnerable
(0.4-3)
eoan Not vulnerable
(0.4-3)
focal Not vulnerable
(0.4-3)
groovy Not vulnerable
(0.4-3)
impish Not vulnerable
(0.4-3)
jammy Not vulnerable
(0.4-3)
lucid Does not exist

precise Does not exist

trusty
Released (0.4-1ubuntu0.1~esm1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
upstream
Released (0.4-2)
utopic Ignored
(end of life)
vivid Not vulnerable
(0.4-3)
wily Not vulnerable
(0.4-3)
xenial Not vulnerable
(0.4-3)
yakkety Not vulnerable
(0.4-3)
zesty Not vulnerable
(0.4-3)
hirsute Not vulnerable
(0.4-3)