Bug 1276427 (CVE-2015-9261) - CVE-2015-9261 busybox: Segmentation fault when unzipping specially crafted zip file
Summary: CVE-2015-9261 busybox: Segmentation fault when unzipping specially crafted zi...
Keywords:
Status: CLOSED WONTFIX
Alias: CVE-2015-9261
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1276428
Blocks: 1276429
TreeView+ depends on / blocked
 
Reported: 2015-10-29 16:18 UTC by Adam Mariš
Modified: 2019-09-29 13:39 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-11-05 10:44:47 UTC
Embargoed:

Attachments (Terms of Use)

Description Adam Mariš 2015-10-29 16:18:54 UTC 
It was found that unziping a specially crafted zip file results in a computation of an invalid pointer and a crash reading an invalid address.

Crash report with reproducer can be found here:

http://seclists.org/oss-sec/2015/q4/158
Comment 1 Adam Mariš 2015-10-29 16:19:15 UTC 
Created busybox tracking bugs for this issue:

Affects: fedora-all [bug 1276428]
Comment 2 Stefan Cornelius 2015-11-04 14:42:03 UTC 
Upstream patch:
http://git.busybox.net/busybox/commit/?id=1de25a6e87e0e627aa34298105a3d17c60a1f44e
Note You need to log in before you can comment on or make changes to this bug.