CVE-2009-2624

Publication date 20 January 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a CVE-2006-4334 regression.

Status

Package Ubuntu Release Status
gzip 9.10 karmic
Not affected
9.04 jaunty
Fixed 1.3.12-6ubuntu2.9.04.1
8.10 intrepid
Fixed 1.3.12-6ubuntu2.8.10.1
8.04 LTS hardy
Fixed 1.3.12-3.2ubuntu0.1
6.06 LTS dapper
Fixed 1.3.5-12ubuntu0.3

References

Related Ubuntu Security Notices (USN)

    • USN-889-1
    • gzip vulnerabilities
    • 20 January 2010

Other references