Lucene search
HistoryAug 17, 2023 - 7:15 p.m.
CVE-2023-39741
lrzip v0.651
heap overflow
libzpaq::postprocessor::write(int) function
denial of service
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
19.6%
lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
Affected configurations
Node
long_range_zip_projectlong_range_zipMatch0.651
| Vendor | Product | Version | CPE |
|---|---|---|---|
| long_range_zip_project | long_range_zip | 0.651 | cpe:2.3:a:long_range_zip_project:long_range_zip:0.651:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-39741
2023-08-17 00:00:00
debiancve
debiancve
CVE-2023-39741
2023-08-17 19:15:12
ubuntucve
ubuntucve
CVE-2023-39741
2023-08-17 00:00:00
osv
osv
CVE-2023-39741
2023-08-17 19:15:12
prion
prion
Heap overflow
2023-08-17 19:15:00
veracode
veracode
Out-of-Bounds Write
2023-12-25 12:57:16
cve
cve
CVE-2023-39741
2023-08-17 19:15:12
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
19.6%
Related for NVD:CVE-2023-39741