{"action":"Upgrade freexl to 1.0.0g-1+deb8u1 or later.","affected":[{"fixed":"1.0.0g-1+deb8u1","introduced":"0"}],"component":"freexl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.0.0g-1+deb8u1"],"id":"tcs_01M5NB5XG8M7MTFTK0N450BV6F","modified_at":"2026-09-09T06:47:29.469740779Z","published_at":"2015-03-31T14:59:12.530Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-2776","https://security-tracker.debian.org/tracker/CVE-2015-2776"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-2776#Debian:14/freexl","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-2776"}],"summary":"The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption) via a crafted shared strings table in a workbook."}