6 matches found
SUSE CVE-2017-9929
In lrzip 0.631, a stack buffer overflow was found in the function getfileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file...
CVE-2022-28044
Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...
CVE-2022-28044
lrzip contains a heap memory corruption in lrzip.c:initialise_control (CVE-2022-28044). The vulnerability affects lrzip memory handling and pointer/memory allocation logic, with Debian and Ubuntu advisories noting potential denial of service and, in some contexts, arbitrary code execution. Public...
CVE-2022-28044
Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...
CVE-2018-11496
In Long Range Zip aka lrzip 0.631, there is a use-after-free in readstream in stream.c, because decompressfile in lrzip.c lacks certain size validation...
CVE-2018-11496
In Long Range Zip aka lrzip 0.631, there is a use-after-free in readstream in stream.c, because decompressfile in lrzip.c lacks certain size validation...