CVE-2015-4645: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow.

Affected products

• Fedoraproject Fedora: version 21 only; version 22 only
• Squashfs Project Squashfs: up to and including 4.3

Published 2017-03-17. Last modified 2026-06-17.