Debian DLA-3005-1 : lrzip - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3005 advisory. lrzip, a compression program, was found to have a heap memory corruption bug. For Debian 9 stretch, this problem has been fixed in version 0.631-1+deb9u3. We recommend that...

DLA-3005-1 lrzip - security update

Bulletin has no description...

Denial Of Service (DoS)

lrzip is vulnerable to denial of service. The vulnerability exists because there is an infinite loop and application hang in the getfileinfo function in lrzip.c which allows a remote attacker to cause a denial of service via a crafted lrz file...

CVE-2022-28044

Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...

DEBIAN-CVE-2022-28044

Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...

UBUNTU-CVE-2022-28044

Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...

Irzip 缓冲区错误漏洞

Irzip is an open source compression utility program. It specializes in compressing large files typically 10-50 MB. A security vulnerability exists in Irzip version v0.640, which stems from the component lrzip.c:initializecontrol containing a heap memory corruption...

Null Pointer Dereference

lrzip is vulnerable to null pointer dereference. The vulnerability exists in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service via a crafted compressed file...

Use After Free

lrzip is vulnerable to after free. The vulnerability exits in lzmadecompressbuf function in stream.c in Irzip which allows attackers to cause a denial of service via a crafted compressed file...

Null Pointer Dereference

lrzip is vulnerable to null pointer dereference.The vulnerability exists in lzodecompressbuf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service via a crafted compressed file...

Debian: Security Advisory (DLA-2981-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2981-1] lrzip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2981-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler April 13, 2022 https://wiki.debian.org/LTS -...

DLA-2981-1 lrzip - security update

Bulletin has no description...

Debian DLA-2981-1 : lrzip - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2981 advisory. Several security vulnerabilities have been discovered in lrzip, a compression program. Invalid pointers, use-after-free and infinite loops would allow attackers to...

Denial Of Service (DoS)

lrzip is vulnerable to denial of service. The vulnerability exists due to a use after free between the functions zpaqdecompressbuf and clearrulist which allows an attacker to crash the system...

CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

DEBIAN-CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

Design/Logic Flaw

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...