Summary
Etienne Stalmans discovered that Squashfs-Tools mishandled certain malformed SQUASHFS files. An attacker could use this vulnerability to write arbitrary files to the filesystem.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | squashfs-tools | 1:4.3-6ubuntu0.18.04.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | squashfs-tools | 1:4.4-1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by…
References
-
report
https://ubuntu.com/security/CVE-2021-40153