CVE-2015-9261 PUBLISHED

huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.

EPSS 0.81% · 74.1th percentile

Risk Scores

EPSS Score
0.81%
74.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSbusybox0, 1:1.22.0-15ubuntu1
Ubuntu:14.04:LTSbusybox1:1.20.0-9ubuntu1, 0, 1:1.21.0-1ubuntu1

Timeline

References

Open in Interactive Console →