CVE-2006-1168
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote...
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.
Exploit likelihood
What each source reports
NVD Score used
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.
- Record
CVE-2006-1168- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.
- Record
CVE-2006-1168- Updated
- 2026-11-02
EUVDEUVD-2006-1172 No score
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.
- Record
EUVD-2006-1172- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8g8g-9f4q-f275 No score
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote...
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.
- Record
GHSA-8g8g-9f4q-f275- Updated
- 2026-11-02
OSV No score
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.
- Record
CVE-2006-1168- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1168 No score
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.
- Record
DEBIAN-CVE-2006-1168- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10385-1 No score
ncompress-4.2.4.4-1.1 on GA media
These are all security issues fixed in the ncompress-4.2.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10385-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ncompressDebian:12 |
before 4.2.4-16 | 4.2.4-16 |
ncompressDebian:13 |
before 4.2.4-16 | 4.2.4-16 |
ncompressDebian:14 |
before 4.2.4-16 | 4.2.4-16 |
ncompressDebian:3.1 |
before 4.2.4-15sarge2, plus listed versions 4.2.4-154.2.4-15sarge1 |
4.2.4-15sarge2 |
ncompressRed Hat:enterprise_linux:3::as |
before 0:4.2.4-39.rhel3 | 0:4.2.4-39.rhel3 |
ncompress-debuginfoRed Hat:enterprise_linux:3::as |
before 0:4.2.4-39.rhel3 | 0:4.2.4-39.rhel3 |
ncompressRed Hat:enterprise_linux:3::desktop |
before 0:4.2.4-39.rhel3 | 0:4.2.4-39.rhel3 |
ncompress-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:4.2.4-39.rhel3 | 0:4.2.4-39.rhel3 |
ncompressRed Hat:enterprise_linux:3::es |
before 0:4.2.4-39.rhel3 | 0:4.2.4-39.rhel3 |
ncompress-debuginfoRed Hat:enterprise_linux:3::es |
before 0:4.2.4-39.rhel3 | 0:4.2.4-39.rhel3 |
Show 23 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ncompressRed Hat:enterprise_linux:3::ws |
before 0:4.2.4-39.rhel3 | 0:4.2.4-39.rhel3 |
ncompress-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:4.2.4-39.rhel3 | 0:4.2.4-39.rhel3 |
ncompressRed Hat:enterprise_linux:4::as |
before 0:4.2.4-43.rhel4 | 0:4.2.4-43.rhel4 |
ncompress-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.2.4-43.rhel4 | 0:4.2.4-43.rhel4 |
ncompressRed Hat:enterprise_linux:4::desktop |
before 0:4.2.4-43.rhel4 | 0:4.2.4-43.rhel4 |
ncompress-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.2.4-43.rhel4 | 0:4.2.4-43.rhel4 |
ncompressRed Hat:enterprise_linux:4::es |
before 0:4.2.4-43.rhel4 | 0:4.2.4-43.rhel4 |
ncompress-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.2.4-43.rhel4 | 0:4.2.4-43.rhel4 |
ncompressRed Hat:enterprise_linux:4::ws |
before 0:4.2.4-43.rhel4 | 0:4.2.4-43.rhel4 |
ncompress-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.2.4-43.rhel4 | 0:4.2.4-43.rhel4 |
busyboxRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:1.2.0-13.el5 | 1:1.2.0-13.el5 |
busybox-anacondaRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:1.2.0-13.el5 | 1:1.2.0-13.el5 |
busyboxRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.2.0-13.el5 | 1:1.2.0-13.el5 |
busybox-anacondaRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.2.0-13.el5 | 1:1.2.0-13.el5 |
busyboxRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busyboxRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busyboxRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busyboxRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
ncompressopenSUSE:Tumbleweed |
before 4.2.4.4-1.1 | 4.2.4.4-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1168 is a high vulnerability (CVSS 7.5) in Ncompress, published August 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.82%, the 93rd percentile. Fixed in ncompress 4.2.4-16.
References
secunia.com/advisories/21437
exchange.xforce.ibmcloud.com/vulnerabilities/28315
security.gentoo.org/glsa/glsa-200610-03.xml
novell.com/linux/security/advisories/2006_20_sr.html
mandriva.com/security/advisories?name=MDKSA-2006:140
Show 43 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9373
securityfocus.com/bid/19455
downloads.avaya.com/css/P8/documents/100158840
bugs.gentoo.org/show_bug.cgi?id=141728
debian.org/security/2006/dsa-1149
support.avaya.com/elmodocs2/security/ASA-2006-226.htm
redhat.com/support/errata/RHSA-2006-0663.html
vupen.com/english/advisories/2006/3234
rhn.redhat.com/errata/RHSA-2012-0810.html
bugzilla.redhat.com/show_bug.cgi?id=728536
securitytracker.com/id?1016836
nvd.nist.gov/vuln/detail/CVE-2006-1168
github.com/advisories/GHSA-8g8g-9f4q-f275
security-tracker.debian.org/tracker/CVE-2006-1168
access.redhat.com/errata/RHSA-2006:0663
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0663.json
cve.org/CVERecord?id=CVE-2006-1168
suse.com/security/cve/CVE-2006-1168