GLSA-202005-01 : Long Range ZIP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202005-01 Long Range ZIP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Long Range ZIP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

CVE-2017-8846

The readstream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted archive...

CVE-2017-8846

CVE-2017-8846 affects lrzip 0.631. The read_stream function in lrzip’s lrzip/liblrzip.so has a use-after-free vulnerability that can cause a denial of service via a crafted archive. Public references (Debian/Ubuntu advisories and Gentoo GLSA) confirm the issue and track fixes. Remediation involve...

CVE-2017-8846

The readstream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted archive...