CVE-2015-2063

EPSS 1.1%

unace - security update

Published: 3/9/2015Modified: 4/28/2026

Also known as:DEBIAN-CVE-2015-2063

Description

Integer overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a small file header in an ace archive, which triggers a buffer overflow.

Affected packages (3)

Debian/unacefrom 0, < 1.2b-12
Debian/unacefrom 0, < 1.2b-7+deb6u1
Debian/unacefrom 0, < 1.2b-10+deb7u1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-2063