Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/cabextract@1.4-5?distro=trixie
purl pkg:deb/debian/cabextract@1.4-5?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-35vw-agja-w7du Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop. CVE-2014-9556
VCID-gc7q-6qf2-73dw Multiple vulnerabilities have been found in cabextract and libmspack, the worst of which could result in a Denial of Service. CVE-2018-18584

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:24:57.509683+00:00 Debian Importer Fixing VCID-35vw-agja-w7du https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:33:54.442477+00:00 Debian Importer Fixing VCID-gc7q-6qf2-73dw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:15:15.533782+00:00 Debian Importer Fixing VCID-35vw-agja-w7du https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:08:08.824726+00:00 Debian Importer Fixing VCID-gc7q-6qf2-73dw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:18:28.751214+00:00 Debian Importer Fixing VCID-35vw-agja-w7du https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:08:36.636477+00:00 Debian Importer Fixing VCID-gc7q-6qf2-73dw https://security-tracker.debian.org/tracker/data/json 38.1.0