CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2023-39743

CVE-2023-39743 affects lrzip-next LZMA v23.01. The vulnerability arises in the decoding path: an access violation in the component /bz3_decode_block, specifically in src/libbz3.c, as the root cause. Documentation repeatedly states this leads to a potential denial of service or crash (availability...

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

PT-2023-27099 · Unknown · Lrzip-Next

Name of the Vulnerable Software and Affected Versions: lrzip-next LZMA version 23.01 Description: The issue is related to an access violation in the component /bz3 decode block, located in the src/libbz3.c file. This access violation can be exploited, potentially leading to unintended consequence...

lrzip 缓冲区错误漏洞

lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip version v0.651, which stems from the presence of a heap overflow that allows an attacker to cause a denial of service DoS via a crafted file...

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2023-39743

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...

PT-2023-27098 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.651 Description: The issue is related to a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This allows attackers to cause a Denial of Service DoS via a crafted file. Recommendations: Fo...

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2023-39741

The CVE-2023-39741 vulnerability affects lrzip v0.651, where a heap overflow in libzpaq::PostProcessor::write(int) can be triggered by a crafted file to cause a Denial of Service. The available connected documents confirm the root cause in /libzpaq/libzpaq.cpp and consistently describe DoS impact...

SUSE CVE-2017-8842

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...

SUSE CVE-2017-8843

The joinpthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive...

SUSE CVE-2017-8844

The read1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted archive...

SUSE CVE-2017-8846

The readstream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted archive...

SUSE CVE-2017-8845

The lzo1xdecompress function in lzo1xd.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive...

SUSE CVE-2017-9929

In lrzip 0.631, a stack buffer overflow was found in the function getfileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file...

SUSE CVE-2017-9928

In lrzip 0.631, a stack buffer overflow was found in the function getfileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafted file...

SUSE CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

SUSE CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...