CVE-2022-33067

Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...

CVE-2022-33067

Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...

CVE-2022-33067

CVE-2022-33067 affects lrzip v0.651, where multiple invalid arithmetic shifts in lrzip.c:get_magic and libzpaq/libzpaq.cpp:Predictor::init can lead to a Denial of Service. The Red Hat/NVD/CNVD entries confirm the vulnerability but do not provide concrete exploit details, affected versions beyond ...

The vulnerability of the lrzip.c component: the initialise_control function of the Irzip software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lrzip.c component, specifically the initialisecontrol function of the Irzip software, arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

Debian: Security Advisory (DSA-5145-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5145-1] lrzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5145-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 24, 2022 https://www.debian.org/security/faq -...

DSA-5145-1 lrzip - security update

Bulletin has no description...

Debian DSA-5145-1 : lrzip - security update

The remote Debian 10 / 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5145 advisory. Multiple vulnerabilities have been discovered in the lrzip compression program which could result in denial of service or potentially the execution of...

Debian: Security Advisory (DLA-3005-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3005-1] lrzip security update

Debian LTS Advisory DLA-3005-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera May 13, 2022 https://wiki.debian.org/LTS Package : lrzip Version : 0.631-1+deb9u3 CVE ID : CVE-2022-28044 lrzip, a compression program, was found to have a heap memory corruption bug. Fo...

Debian DLA-3005-1 : lrzip - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3005 advisory. lrzip, a compression program, was found to have a heap memory corruption bug. For Debian 9 stretch, this problem has been fixed in version 0.631-1+deb9u3. We recommend that...

DLA-3005-1 lrzip - security update

Bulletin has no description...

Denial Of Service (DoS)

lrzip is vulnerable to denial of service. The vulnerability exists because there is an infinite loop and application hang in the getfileinfo function in lrzip.c which allows a remote attacker to cause a denial of service via a crafted lrz file...

CVE-2022-28044

Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...

DEBIAN-CVE-2022-28044

Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...

UBUNTU-CVE-2022-28044

Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...

Irzip 缓冲区错误漏洞

Irzip is an open source compression utility program. It specializes in compressing large files typically 10-50 MB. A security vulnerability exists in Irzip version v0.640, which stems from the component lrzip.c:initializecontrol containing a heap memory corruption...

Null Pointer Dereference

lrzip is vulnerable to null pointer dereference. The vulnerability exists in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service via a crafted compressed file...

Use After Free

lrzip is vulnerable to after free. The vulnerability exits in lzmadecompressbuf function in stream.c in Irzip which allows attackers to cause a denial of service via a crafted compressed file...

Null Pointer Dereference

lrzip is vulnerable to null pointer dereference.The vulnerability exists in lzodecompressbuf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service via a crafted compressed file...