CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2624

The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a CVE-2006-4334 regression.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.061

EPSS Ranking 90.3%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2009-2624

Gnu » Gzip » Version: N/A

cpe:2.3:a:gnu:gzip:-
Gnu » Gzip » Version: 1.2.4

cpe:2.3:a:gnu:gzip:1.2.4
Gnu » Gzip » Version: 1.2.4a

cpe:2.3:a:gnu:gzip:1.2.4a
Gnu » Gzip » Version: 1.3

cpe:2.3:a:gnu:gzip:1.3
Gnu » Gzip » Version: 1.3.1

cpe:2.3:a:gnu:gzip:1.3.1
Gnu » Gzip » Version: 1.3.10

cpe:2.3:a:gnu:gzip:1.3.10
Gnu » Gzip » Version: 1.3.11

cpe:2.3:a:gnu:gzip:1.3.11
Gnu » Gzip » Version: 1.3.12

cpe:2.3:a:gnu:gzip:1.3.12
Gnu » Gzip » Version: 1.3.2

cpe:2.3:a:gnu:gzip:1.3.2
Gnu » Gzip » Version: 1.3.3

cpe:2.3:a:gnu:gzip:1.3.3
Gnu » Gzip » Version: 1.3.4

cpe:2.3:a:gnu:gzip:1.3.4
Gnu » Gzip » Version: 1.3.5

cpe:2.3:a:gnu:gzip:1.3.5
Gnu » Gzip » Version: 1.3.6

cpe:2.3:a:gnu:gzip:1.3.6
Gnu » Gzip » Version: 1.3.7

cpe:2.3:a:gnu:gzip:1.3.7
Gnu » Gzip » Version: 1.3.8

cpe:2.3:a:gnu:gzip:1.3.8
Gnu » Gzip » Version: 1.3.9

cpe:2.3:a:gnu:gzip:1.3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2624

Products

Pricing

Contact Us