CVE-2022-33067

Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...

PT-2022-21675

Name of the Vulnerable Software and Affected Versions Lrzip version 0.651 Description The issue is related to multiple invalid arithmetic shifts in the functions get magic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. This allows attackers to cause a Denial of Service via unspecified...