tocsin

Debian/squashfs-tools: unknown

Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock

Action: Upgrade squashfs-tools to 1:4.2+20121212-1 or later.

Affected

introducedfixedlast affected
01:4.2+20121212-1-

Fixed versions

1:4.2+20121212-1

Sources

published · modified · JSON