Lucene search
+L

10472 matches found

OSV
OSV
added 2018/01/31 6:29 p.m.2 views

ALPINE-CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS8.1AI score0.02875EPSS
SaveExploits1References1
CVE
CVE
added 2018/01/31 6:00 p.m.174 views

CVE-2018-5996

The CVE-2018-5996 entry affects 7-Zip (and p7zip) with a flaw in NCompress::NRar3::CDecoder::Code prior to version 18.00 that allows remote attackers to trigger memory corruptions in the PPMd code via a crafted RAR archive, potentially causing a denial of service or arbitrary code execution. Conn...

7.8CVSS7.7AI score0.02875EPSS
SaveExploits1References5Affected Software2
Cvelist
Cvelist
added 2018/01/31 6:00 p.m.30 views

CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.7AI score0.02875EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2018/01/31 6:00 p.m.82 views

CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS7.8AI score0.02875EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2018/01/31 6:00 p.m.28 views

CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS8AI score0.02875EPSS
SaveExploits1
CNVD
CNVD
added 2018/01/31 12:00 a.m.7 views

cpio security bypass vulnerability

cpio is a set of file backup tools developed by the GNU Project for use in the UNIX operating system and as a file format. The tool supports depositing and reading files from cpio or tar-formatted archive packages. A security vulnerability exists in cpio 2.7 and later versions, which stems from t...

7AI score
SaveExploits3References1
CNVD
CNVD
added 2018/01/31 12:00 a.m.11 views

7-Zip and p7zip heap buffer overflow vulnerability

7-Zip is a free, open source compression/decompression software. p7zip is its version for Linux-based platforms. A heap buffer overflow vulnerability exists in the NCompress::NShrink::CDecoder::CodeReal method in versions prior to 7-Zip 18.00 and p7zip. A remote attacker can exploit this...

7.8CVSS7.9AI score0.04938EPSS
SaveExploits1References1
Fedora
Fedora
added 2018/01/30 6:12 p.m.28 views

[SECURITY] Fedora 27 Update: gcab-1.0-1.fc27

gcab is a tool to manipulate Cabinet archive...

7.8CVSS1.6AI score0.02185EPSS
SaveExploits0
OSV
OSV
added 2018/01/30 4:29 p.m.31 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS8.3AI score
SaveExploits0References7
OSV
OSV
added 2018/01/30 4:29 p.m.9 views

AZL-6783 CVE-2017-17969 affecting package p7zip for versions less than 16.02-22

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS7.8AI score0.04938EPSS
SaveExploits1References1
Prion
Prion
added 2018/01/30 4:29 p.m.24 views

Heap overflow

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

6.8CVSS8AI score0.04938EPSS
SaveExploits1References6Affected Software3
NVD
NVD
added 2018/01/30 4:29 p.m.24 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS8AI score0.04938EPSS
SaveExploits1References7
OSV
OSV
added 2018/01/30 4:29 p.m.2 views

ALPINE-CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS8.1AI score0.04938EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2018/01/30 4:00 p.m.27 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS8.2AI score0.04938EPSS
SaveExploits1
Cvelist
Cvelist
added 2018/01/30 4:00 p.m.29 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

8.1AI score0.04938EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
added 2018/01/30 4:00 p.m.47 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS8.2AI score0.04938EPSS
SaveExploits1
CVE
CVE
added 2018/01/30 4:00 p.m.202 views

CVE-2017-17969

CVE-2017-17969 affects p7zip (7‑zip port) via a heap-based buffer overflow in NCompress::NShrink::CDecoder::CodeReal, exploitable when processing a crafted ZIP archive. The Debian advisory confirms a remote attacker can cause denial of service or potentially execute arbitrary code with the user’s...

7.8CVSS8AI score0.04938EPSS
SaveExploits1References7Affected Software2
Kaspersky
Kaspersky
added 2018/01/30 12:00 a.m.2501 views

KLA11190 Multiple vulnerabilities in 7-Zip

Multiple serious vulnerabilities have been found in 7-Zip. Malicious users can exploit these vulnerabilities to cause denial of service and possibly to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Memory corruption vulnerabilities in RAR3 handler can be exploited remote...

7.8CVSS9AI score0.04938EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
added 2018/01/30 12:00 a.m.43 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS7.4AI score0.04938EPSS
SaveExploits1References3
OSV
OSV
added 2018/01/30 12:00 a.m.4 views

UBUNTU-CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS7.7AI score0.04938EPSS
SaveExploits1References4
Rows per page
Query Builder