330 matches found
UBUNTU-CVE-2022-26291
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...
CVE-2022-26291
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...
CVE-2022-26291
CVE-2022-26291 affects lrzip, where a concurrency use-after-free between zpaq_decompress_buf() and clear_rulist() can cause a Denial of Service via a crafted lrz file. The issue is confirmed in Debian/Ubuntu advisories: fixed in lrzip 0.641-1+deb11u1 (Bullseye) and related backports, with earlier...
CVE-2022-26291
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...
CVE-2022-26291
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...
CVE-2022-26291
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...
CVE-2022-26291: Use After Free
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...
lrzip 资源管理错误漏洞
lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip v0.641, which stems from the inclusion of multiple concurrent post-release reuses between functions zpaqdecompressbuf and clearrulist. An attacker could cause a denial of servi...
USN-5171-2: Long Range ZIP vulnerabilities
USN-5171-1 fixed vulnerabilities in Long Range ZIP. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Long Range ZIP incorrectly handled certain specially crafted lrz files. A remote attacker could possibly...
Ubuntu: Security Advisory (USN-5171-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5171-1: Long Range ZIP vulnerabilities
It was discovered that Long Range ZIP incorrectly handled certain specially crafted lrz files. A remote attacker could possibly use this issue to cause a denial of service crash or other unspecified impact...
The vulnerability of the lzma_decompress_buf function in the stream.c component of the Lrzip compression algorithm allows a hacker to cause a service failure after the memory is released.
The vulnerability of the lzmadecompressbuf function in the stream.c component of the Lrzip compression program relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created compressed file...
The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program, related to pointer arithmetic errors, allows a malicious actor to cause a service failure.
The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a specially created compressed file...
The vulnerability of the lzo_decompress_buf function in the stream.c component of the Lrzip compression algorithm, related to pointer arithmetic errors, allows a hacker to cause a service failure.
The vulnerability of the lzodecompressbuf function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created compressed file...
Debian: Security Advisory (DLA-2725-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2725-1 : lrzip - LTS security update
The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2725 advisory. Several security vulnerabilities have been discovered in lrzip, a compression program. Heap-based and stack buffer overflows, use-after-free and infinite loops wou...
[SECURITY] [DLA 2725-1] lrzip security update
Debian LTS Advisory DLA-2725-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 01, 2021 https://wiki.debian.org/LTS Package : lrzip Version : 0.631-1+deb9u1 CVE ID : CVE-2017-8844 CVE-2017-8846 CVE-2017-9928 CVE-2017-9929 CVE-2018-5650 CVE-2018-5747...
DLA-2725-1 lrzip - security update
Bulletin has no description...
PT-2020-6434 · Lrzip +2 · Lrzip +2
Name of the Vulnerable Software and Affected Versions: Lrzip version 0.631 Description: The issue is related to a use after free in the lzma decompress buf function in stream.c, which can be exploited by attackers to cause a Denial of Service DoS via a crafted compressed file. This can allow a...
PT-2020-6433 · Lrzip +2 · Lrzip +2
Name of the Vulnerable Software and Affected Versions: Lrzip version 0.631 Description: A null pointer dereference was discovered in the ucompthread function in stream.c, which allows attackers to cause a denial of service via a crafted compressed file. The exploitation of this issue may permit a...