MNBSD-2011-1: Infinite loop in compress/gzip when handling malformed .Z files

Description

Errors in handling corrupt LZW-compressed input in compress(1) and gzip(1) can cause the utilities to enter an infinite loop when decompressing a malformed .Z file, resulting in a denial of service.

Affected Versions

compress

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-11:04.compress.asc
• https://www.cve.org/CVERecord?id=CVE-2011-2895

Additional Information

Aliases: CVE-2011-2895

Published: September 28, 2011
Last Modified: September 28, 2011