Phillip Lougher

3 exploits Active since Mar 2017
CVE-2015-4645 WRITEUP MEDIUM WRITEUP
Squashfs < 4.3 - Denial of Service via Integer Overflow in Fragment Table Parsing
Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow.
CVSS 5.5
CVE-2015-4646 WRITEUP HIGH WRITEUP
squashfs < 4.3 - Denial of Service via Crafted Input
(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.
CVSS 7.5
CVE-2021-40153 WRITEUP HIGH WRITEUP
squashfs-tools 4.5 - Path Traversal and Arbitrary File Write via unsquash-1.c Directory Entry
squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory, and thus allows writing to locations outside of the destination.
CVSS 8.1