CVE-2015-4646: Input Validation
Published Apr 13, 2017
·Updated
(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.
Affected Software
1 affected component
Squashfs Project Squashfs<=4.3
Event History
Apr 13, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4646?
CVE-2015-4646 is classified as a denial of service vulnerability that can cause application crashes.
2
How do I fix CVE-2015-4646?
To fix CVE-2015-4646, update Squashfs to version 4.3 or later.
3
Which software is affected by CVE-2015-4646?
CVE-2015-4646 affects Squashfs versions up to and including 4.3.
4
Can CVE-2015-4646 be exploited remotely?
Yes, CVE-2015-4646 can be exploited by remote attackers through crafted input.
5
What are some symptoms of CVE-2015-4646 exploitation?
Exploitation of CVE-2015-4646 may result in application crashes and service disruptions.