EUVD-2018-3527

Malware in sbrugna...

CVE-2018-16985

In Lizard formerly LZ5 2.0, use of an invalid memory address was discovered in LZ5compresscontinue in lz5compress.c, related to LZ5compressfastSmall and MEMread32. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2018-13818

Name of the Vulnerable Software and Affected Versions Lizard formerly LZ5 version 2.0 Description A denial of service issue was found, related to the use of an invalid memory address in the LZ5 compress continue function in lz5 compress.c, specifically with LZ5 compress fastSmall and MEM read32...

CVE-2018-11498

In Lizard v1.0 and LZ5 v2.0 the prior release, before the product was renamed, there is an unchecked buffer size during a memcpy in the LizarddecompressLIZv1 function lib/lizarddecompressliz.h. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file,...

CVE-2018-11498

In Lizard v1.0 and LZ5 v2.0 the prior release, before the product was renamed, there is an unchecked buffer size during a memcpy in the LizarddecompressLIZv1 function lib/lizarddecompressliz.h. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file,...

Remote code execution

In Lizard v1.0 and LZ5 v2.0 the prior release, before the product was renamed, there is an unchecked buffer size during a memcpy in the LizarddecompressLIZv1 function lib/lizarddecompressliz.h. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file,...

CVE-2018-11498

CVE-2018-11498 affects Lizard v1.0 and LZ5 v2.0. A buffer size check is missing in Lizard_decompress_LIZv1 (lib/lizard_decompress_liz.h) during memcpy, enabling remote attackers to trigger denial of service or remote code execution with crafted input. Sources from CNVD/FreeBSD VuXML/NVD OSV corro...

CVE-2018-11498

In Lizard v1.0 and LZ5 v2.0 the prior release, before the product was renamed, there is an unchecked buffer size during a memcpy in the LizarddecompressLIZv1 function lib/lizarddecompressliz.h. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file,...

CVE-2018-11498

In Lizard v1.0 and LZ5 v2.0 the prior release, before the product was renamed, there is an unchecked buffer size during a memcpy in the LizarddecompressLIZv1 function lib/lizarddecompressliz.h. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file,...

PT-2018-10614

Name of the Vulnerable Software and Affected Versions Lizard version 1.0 LZ5 version 2.0 Description The issue is related to an unchecked buffer size during a memcpy in the Lizard decompress LIZv1 function, located in lib/lizard decompress liz.h. This allows remote attackers to cause a denial of...

CVE-2018-11498: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Lizard v1.0 and LZ5 v2.0 the prior release, before the product was renamed, there is an unchecked buffer size during a memcpy in the LizarddecompressLIZv1 function lib/lizarddecompressliz.h. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file,...