First published: Thu Apr 13 2017(Updated: )
(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Squashfs | <=4.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-4646 is classified as a denial of service vulnerability that can cause application crashes.
To fix CVE-2015-4646, update Squashfs to version 4.3 or later.
CVE-2015-4646 affects Squashfs versions up to and including 4.3.
Yes, CVE-2015-4646 can be exploited by remote attackers through crafted input.
Exploitation of CVE-2015-4646 may result in application crashes and service disruptions.