Summary
GNU gzip contains a global buffer overflow in its LZH decompression logic, caused by improper reuse of shared global state between different decompression formats within a single execution. A global array shared across the LZ77, LZW, and LZH decompression routines is not reinitialized between files processed in the same invocation. By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single command, an attacker can poison that shared state. This subsequently triggers an out-of-bounds read in the LZH decoder, which follows stale values and reads past the end of the allocated global buffer. Successful exploitation may disclose the contents of adjacent memory.
Products not listed in the Impact Details section have not been evaluated. Furthermore, products that have exceeded any software maintenance time periods are also not evaluated and will not be published. Please consult End of Sale and End of Service Life - Extreme Networks for the EOL notices related to the product under question.
Products Potentially Affected
None
Impact Details
|
OS/Product
|
Exposure
|
|
ExtremeAnalytics for Site Engine
|
Yes
|
|
ExtremeCloud IQ - Site Engine (XIQ-SE)
|
Yes
|
|
ExtremeControl for Site Engine
|
Yes
|
Repair Recommendations
ExtremeAnalytics for Site Engine:
Fixed in 26.8.10 or later.
ExtremeCloud IQ - Site Engine (XIQ-SE):
Fixed in 26.8.10 or later.
ExtremeControl for Site Engine:
Fixed in 26.8.10 or later
Please see the full Security Advisory here for more details and future updates.
