Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-4471

Fixed in a distro release EPSS 2%

Off-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer under-read and application crash) via a crafted CAB archive.

Published 2015-06-11 · CVE record · OSV

Products: libmspack_project libmspack

Distro releases

ReleasePackageFixed in
Debian 12libmspack0.5-1
Debian 13libmspack0.5-1
Debian 14libmspack0.5-1
SUSE Linux Enterprise Desktop 11 SP3cabextract1.2-2.12.1
SUSE Linux Enterprise Desktop 11 SP3libmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Desktop 11 SP4cabextract1.2-2.12.1
SUSE Linux Enterprise Desktop 11 SP4libmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Desktop 12libmspack0.4-14.4
SUSE Linux Enterprise Desktop 12 SP1libmspack0.4-14.4
SUSE Linux Enterprise Server 11 SP3libmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Server 11 SP3-TERADATAlibmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Server 11 SP4libmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Server 12libmspack0.4-14.4
SUSE Linux Enterprise Server 12 SP1libmspack0.4-14.4
SUSE Linux Enterprise Server for SAP Applications 11 SP3libmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Server for SAP Applications 12libmspack0.4-14.4
SUSE Linux Enterprise Server for SAP Applications 12 SP1libmspack0.4-14.4
SUSE Linux Enterprise Software Development Kit 11 SP3libmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Software Development Kit 11 SP4libmspack0.0.20060920alpha-74.10.1
SUSE Linux Enterprise Software Development Kit 12libmspack0.4-14.4
SUSE Linux Enterprise Software Development Kit 12 SP1libmspack0.4-14.4
Ubuntu Pro 14.04 LTScabextract1.4-4ubuntu0.1~esm1
Ubuntu Pro 14.04 LTSlibmspack0.4-1ubuntu0.1~esm1