Lucene search
+L

330 matches found

OSV
OSV
•added 2023/08/17 7:15 p.m.•24 views

UBUNTU-CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

5.5CVSS6.1AI score0.00346EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/08/17 7:15 p.m.•25 views

CVE-2023-39743

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...

5.3CVSS6.8AI score0.00825EPSS
SaveExploits1References3
Prion
Prion
•added 2023/08/17 7:15 p.m.•103 views

Heap overflow

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

1.9CVSS5.5AI score0.00346EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/08/17 7:15 p.m.•19 views

UBUNTU-CVE-2023-39743

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...

5.3CVSS7.2AI score0.00825EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/08/17 12:00 a.m.•13 views

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

7.5AI score0.00346EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/08/17 12:00 a.m.•18 views

lrzip 安全漏洞

lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip-next LZMA v23.01, which stems from the presence of an access conflict...

5.3CVSS6.9AI score0.00825EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/17 12:00 a.m.•1 views

CVE-2023-39741: Out-of-bounds Write

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

5.5CVSS6.1AI score0.00346EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/17 12:00 a.m.•0 views

CVE-2023-39743: Improper Access Control

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...

5.3CVSS5.9AI score0.00825EPSS
SaveExploits1References2
CVE
CVE
•added 2023/08/17 12:00 a.m.•73 views

CVE-2023-39743

CVE-2023-39743 affects lrzip-next LZMA v23.01. The vulnerability arises in the decoding path: an access violation in the component /bz3_decode_block, specifically in src/libbz3.c, as the root cause. Documentation repeatedly states this leads to a potential denial of service or crash (availability...

5.3CVSS5.3AI score0.00825EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2023/08/17 12:00 a.m.•71 views

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

5.5CVSS5.3AI score0.00346EPSS
SaveExploits1
OSV
OSV
•added 2023/08/17 12:00 a.m.•30 views

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

7.5AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/08/17 12:00 a.m.•8 views

PT-2023-27099 · Unknown · Lrzip-Next

Name of the Vulnerable Software and Affected Versions: lrzip-next LZMA version 23.01 Description: The issue is related to an access violation in the component /bz3 decode block, located in the src/libbz3.c file. This access violation can be exploited, potentially leading to unintended consequence...

5.3CVSS8.6AI score0.00825EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2023/08/17 12:00 a.m.•15 views

lrzip 缓冲区错误漏洞

lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip version v0.651, which stems from the presence of a heap overflow that allows an attacker to cause a denial of service DoS via a crafted file...

5.5CVSS5.6AI score0.00346EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2023/08/17 12:00 a.m.•21 views

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

5.5CVSS5.6AI score0.00346EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2023/08/17 12:00 a.m.•8 views

PT-2023-27098 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.651 Description: The issue is related to a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This allows attackers to cause a Denial of Service DoS via a crafted file. Recommendations: Fo...

5.5CVSS5.2AI score0.00346EPSS
SaveExploits1References17
Cvelist
Cvelist
•added 2023/08/17 12:00 a.m.•44 views

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

5.7AI score0.00346EPSS
SaveExploits1References3
CVE
CVE
•added 2023/08/17 12:00 a.m.•76 views

CVE-2023-39741

The CVE-2023-39741 vulnerability affects lrzip v0.651, where a heap overflow in libzpaq::PostProcessor::write(int) can be triggered by a crafted file to cause a Denial of Service. The available connected documents confirm the root cause in /libzpaq/libzpaq.cpp and consistently describe DoS impact...

5.5CVSS5.4AI score0.00346EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/08/17 12:00 a.m.•51 views

CVE-2023-39743

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...

5.6AI score0.00825EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:45 a.m.•6 views

SUSE CVE-2017-8842

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...

5.5CVSS6.7AI score0.01573EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:45 a.m.•9 views

SUSE CVE-2017-8843

The joinpthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive...

5.5CVSS6.7AI score0.01383EPSS
SaveExploits0References3
Rows per page
Query Builder