CVE-2017-8847

CVE-2017-8847 affects lrzip 0.631 where the bufRead::get() function in libzpaq/libzpaq.h within liblrzip.so can dereference a NULL pointer when processing a crafted archive, enabling a denial of service (application crash). Public advisories consistently identify this vulnerability in Long Range ...