tocsin

Debian/libmspack: unknown

The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via

Action: Upgrade libmspack to 0.4-3 or later.

Affected

introducedfixedlast affected
00.4-3-

Fixed versions

0.4-3

Sources

published · modified · JSON