DEBIAN-CVE-2025-15614
- Source
- https://security-tracker.debian.org/tracker/CVE-2025-15614
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-15614.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2025-15614
- Upstream
- Published
- 2026-09-05T12:16:45Z
- Modified
- 2026-09-11T09:02:58Z
- Severity
-
- 4.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
- Summary
- [none]
- Details
-
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process.
- References
Affected packages
Debian:12 / ugrep
Package
- Name
- ugrep
- Purl
- pkg:deb/debian/ugrep?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.11.2+dfsg-1
3.12.1+dfsg-1
3.12.6+dfsg-1
3.12.7+dfsg-1
4.*
4.1.0+dfsg-1
4.3.1+dfsg-1
4.3.2+dfsg-1
4.3.2+dfsg-2
4.3.2+dfsg-3
4.3.3+dfsg-1
4.3.4+dfsg-1
4.3.6+dfsg-1
4.4.1+dfsg-1
4.5.1+dfsg-1
4.5.1+dfsg-2
4.5.1+dfsg-3
4.5.1+dfsg-4
4.5.1+dfsg-5
4.5.2+dfsg-1
5.*
5.0.0+dfsg-1
5.1.1+dfsg-1
5.1.3+dfsg-1
5.1.4+dfsg-1
6.*
6.0.0+dfsg-1
6.0.1+dfsg-1
6.4.1+dfsg-1
6.5.0+dfsg-1
7.*
7.0.2+dfsg-1
7.0.4+dfsg-1
7.1.1+dfsg-1
7.1.2+dfsg-1
7.2.1+dfsg-1
7.4.2+dfsg-1
7.5.0+dfsg-1
7.6.0+dfsg-1
7.8.2+dfsg-1
7.8.2+dfsg-2
Debian:13 / ugrep
Package
- Name
- ugrep
- Purl
- pkg:deb/debian/ugrep?arch=source&distro=trixie
Debian:14 / ugrep
Package
- Name
- ugrep
- Purl
- pkg:deb/debian/ugrep?arch=source&distro=forky