Lucene search
+L

61 matches found

Debian CVE
Debian CVE
added 2022/06/22 1:24 p.m.49 views

CVE-2022-33067

Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...

5.5CVSS5.6AI score0.00611EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/06/22 1:24 p.m.32 views

CVE-2022-33067

Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...

5.8AI score0.00611EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2022/06/22 1:24 p.m.16 views

CVE-2022-33067

Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...

5.5CVSS5.7AI score0.00611EPSS
SaveExploits1
Veracode
Veracode
added 2022/03/31 9:30 p.m.21 views

Denial Of Service (DoS)

lrzip is vulnerable to denial of service. The vulnerability exists due to a use after free between the functions zpaqdecompressbuf and clearrulist which allows an attacker to crash the system...

5.5CVSS3.3AI score0.00866EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/28 10:15 p.m.5 views

CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

5.5CVSS5.9AI score0.00866EPSS
SaveExploits1References4
Prion
Prion
added 2022/03/28 10:15 p.m.28 views

Design/Logic Flaw

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

4.3CVSS5.5AI score0.00866EPSS
SaveExploits1References3Affected Software2
UbuntuCve
UbuntuCve
added 2022/03/28 10:15 p.m.40 views

CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

5.5CVSS6.4AI score0.00866EPSS
SaveExploits1References3
OSV
OSV
added 2022/03/28 10:15 p.m.10 views

UBUNTU-CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

5.5CVSS6.4AI score0.00866EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2022/03/28 9:52 p.m.111 views

CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

5.5CVSS5.6AI score0.00866EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/03/28 9:52 p.m.42 views

CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

5.8AI score0.00866EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2022/03/28 9:52 p.m.81 views

CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

5.5CVSS5.6AI score0.00866EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/03/28 12:00 a.m.8 views

lrzip 资源管理错误漏洞

lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip v0.641, which stems from the inclusion of multiple concurrent post-release reuses between functions zpaqdecompressbuf and clearrulist. An attacker could cause a denial of servi...

5.5CVSS6.3AI score0.00866EPSS
SaveExploits1References11
OSV
OSV
added 2018/05/02 10:29 p.m.22 views

CVE-2018-10685

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the lzmadecompressbuf function of stream.c, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...

9.8CVSS10AI score
SaveExploits0References2
OSV
OSV
added 2018/01/19 8:29 a.m.7 views

UBUNTU-CVE-2018-5786

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the getfileinfo function lrzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS6.8AI score0.01327EPSS
SaveExploits1References6
OSV
OSV
added 2018/01/12 10:29 p.m.8 views

UBUNTU-CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS6.8AI score0.01172EPSS
SaveExploits1References5
CNVD
CNVD
added 2017/06/27 12:00 a.m.7 views

lrzip 'get_fileinfo' function stack overflow vulnerability

lrzip is an open source compression utility for large files. A stack overflow vulnerability exists in the lrzip 'getfileinfo' function, which allows remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which can crash the application...

5.5CVSS7.2AI score0.01045EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/05/10 12:00 a.m.8 views

lrzip denial of service vulnerability

lrzip Long Range ZIP is an open source compression utility for large files. A denial of service vulnerability exists in the 'bufRead::get' function in the libzpaq/libzpaq.h file of liblrzip.so in lrzip version 0.631. A remote attacker can exploit this vulnerability to cause a denial of service nu...

5.5CVSS6.8AI score0.01383EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/05/10 12:00 a.m.9 views

lrzip denial of service vulnerability (CNVD-2017-07523)

lrzip Long Range ZIP is an open source compression utility for large files. A denial of service vulnerability exists in the 'readstream' function of the stream.c file in liblrzip.so in version 0.631 of lrzip. A remote attacker can exploit this vulnerability to cause a denial of service reuse afte...

5.5CVSS6.8AI score0.01572EPSS
SaveExploits0References1
OSV
OSV
added 2017/05/08 2:29 p.m.5 views

UBUNTU-CVE-2017-8847

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive...

5.5CVSS6.8AI score0.01383EPSS
SaveExploits0References3
OSV
OSV
added 2017/05/08 2:29 p.m.8 views

DEBIAN-CVE-2017-8846

The readstream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted archive...

5.5CVSS6.7AI score0.01572EPSS
SaveExploits0References1
Rows per page
Query Builder