CVE-2010-0001: Medium severity GNU gzip vulnerability
An integer underflow leading to array index error was found in the way gzip used to decompress files / archives, compressed with the Lempel–Ziv–Welch (LZW) compression algorithm. A remote attacker could provide a specially-crafted LZW compressed gzip archive, which once decompressed by a local, unsuspecting user would lead to gzip crash, or, potentially to arbitrary code execution with the privileges of the user running gzip.
Upstream patch: --------------- http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=a3db5806d012082b9e25cc36d09f19cd736a468f
Acknowledgements:
Red Hat would like to thank Aki Helin of the Oulu University Secure Programming Group for responsibly reporting this flaw.
Other sources
Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0001?
CVE-2010-0001 is considered a medium severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2010-0001?
To fix CVE-2010-0001, update gzip to version 1.3.14 or later, which addresses the integer underflow issue.
Which versions of gzip are affected by CVE-2010-0001?
The affected versions of gzip include all versions prior to 1.3.14, specifically versions 1.2.4 through 1.3.13.
What type of vulnerability is CVE-2010-0001?
CVE-2010-0001 is an integer underflow vulnerability that leads to array index errors during file decompression.
Can CVE-2010-0001 be exploited remotely?
Yes, CVE-2010-0001 can be exploited remotely if a user decompresses a specially-crafted LZW compressed gzip archive.