Lucene search
K

7 matches found

Positive Technologies
Positive Technologies
added 2018/01/19 12:0 a.m.2 views

PT-2018-17143 · Lrzip +2 · Long Range Zip +2

Name of the Vulnerable Software and Affected Versions: Long Range Zip aka lrzip version 0.631 Description: The issue is related to an infinite loop and application hang in the get fileinfo function. Remote attackers could leverage this to cause a denial of service via a crafted lrz file...

9.8CVSS5.8AI score0.01045EPSS
Exploits11References76
CNVD
CNVD
added 2018/01/19 12:0 a.m.2 views

Long Range Zip Infinite Loop Vulnerability

Long Range Zip also known as lrzip is a compression utility that specializes in compressing large files. An infinite loop vulnerability exists in the getfileinfo function lrzip.c in Long Range Zip also known as lrzip 0.631. A remote attacker could exploit this vulnerability via a specially crafte...

5.5CVSS6.8AI score0.00843EPSS
Exploits1References1
CNVD
CNVD
added 2017/06/27 12:0 a.m.2 views

lrzip 'get_fileinfo' function stack overflow vulnerability

lrzip is an open source compression utility for large files. A stack overflow vulnerability exists in the lrzip 'getfileinfo' function, which allows remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which can crash the application...

5.5CVSS7.2AI score0.00421EPSS
Exploits0References1
CNVD
CNVD
added 2017/06/27 12:0 a.m.1 views

lrzip 'get_fileinfo' function stack overflow vulnerability

lrzip is an open source compression utility for large files. A stack overflow vulnerability exists in the lrzip 'getfileinfo' function, which allows remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which can crash the application...

5.5CVSS7.2AI score0.00421EPSS
Exploits0References1
OSV
OSV
added 2017/06/26 7:29 a.m.1 views

DEBIAN-CVE-2017-9928

In lrzip 0.631, a stack buffer overflow was found in the function getfileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafted file...

5.5CVSS7AI score0.00421EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2017/06/26 12:0 a.m.2 views

PT-2017-19291 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: A stack buffer overflow was found in the get fileinfo function in lrzip.c, which allows attackers to cause a denial of service via a crafted file. Recommendations: For lrzip version 0.631, as a temporary...

9.8CVSS6.2AI score0.00843EPSS
Exploits6References48
Positive Technologies
Positive Technologies
added 2017/06/26 12:0 a.m.2 views

PT-2017-19292 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: A stack buffer overflow was found in the get fileinfo function in lrzip.c at line 1074, which allows attackers to cause a denial of service via a crafted file. Recommendations: For lrzip version 0.631, conside...

9.8CVSS6.1AI score0.00843EPSS
Exploits6References48
Rows per page
Query Builder