Search for packages
Package details: pkg:deb/debian/ncompress@4.2.4.2-1%2Blenny1
purl pkg:deb/debian/ncompress@4.2.4.2-1%2Blenny1
Next non-vulnerable version 4.2.4.3-6
Latest non-vulnerable version 4.2.4.3-6
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-1jzu-evut-aaaj
Aliases:
CVE-2010-0001
Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.
4.2.4.3-6
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T14:31:40.718292+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-20T23:59:22.952753+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj None 36.1.3
2025-06-08T07:24:44.567129+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T17:22:16.139094+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj None 36.1.0
2025-04-12T21:15:51.214594+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T05:57:20.676870+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T15:56:20.925869+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj None 36.0.0
2024-11-27T13:04:34.840944+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-10-13T07:33:57.203397+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-09-20T21:21:59.368858+00:00 Debian Oval Importer Affected by VCID-1jzu-evut-aaaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1