6.8

CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.

Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Gzip Version <= 1.3.13
Gnu ≫ Gzip Version1.2.4
Gnu ≫ Gzip Version1.2.4a
Gnu ≫ Gzip Version1.3
Gnu ≫ Gzip Version1.3.1
Gnu ≫ Gzip Version1.3.2
Gnu ≫ Gzip Version1.3.3
Gnu ≫ Gzip Version1.3.4
Gnu ≫ Gzip Version1.3.5
Gnu ≫ Gzip Version1.3.6
Gnu ≫ Gzip Version1.3.7
Gnu ≫ Gzip Version1.3.8
Gnu ≫ Gzip Version1.3.9
Gnu ≫ Gzip Version1.3.10
Gnu ≫ Gzip Version1.3.11
Gnu ≫ Gzip Version1.3.12
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 38.19% 0.971
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P