5 matches found
DEBIAN-CVE-2023-22997
In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the modulegetnextpage return value expects it to be NULL in the error case, whereas it is actually an error pointer...
5.5CVSS6.5AI score0.00265EPSS
SaveExploits0References1
CVE-2018-11496
In Long Range Zip aka lrzip 0.631, there is a use-after-free in readstream in stream.c, because decompressfile in lrzip.c lacks certain size validation...
6.5CVSS6.7AI score
SaveExploits0References2
CVE-2018-11496
In Long Range Zip aka lrzip 0.631, there is a use-after-free in readstream in stream.c, because decompressfile in lrzip.c lacks certain size validation...
6.5CVSS6.9AI score0.01344EPSS
SaveExploits1References6
20