CVE-2017-8844

The read1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted archive...

PT-2017-18574 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer overflow and application crash, or possibly have other unspecified impacts via a crafted archive. This is due to...

PT-2017-18573 · Lrzip · Lrzip

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted archive. This is due to a problem in the join pthread function in...

PT-2017-18576 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted archive. This is due to a problem in the read stream function in stream.c in...

PT-2017-18577 · Lrzip · Lrzip

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted archive. This is due to a problem in the bufRead::get function in...

PT-2017-18572 · Lrzip · Lrzip

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue is related to a divide-by-zero error and application crash that can be triggered by remote attackers via a crafted archive. This is caused by the bufRead::get function in libzpaq/libzpaq.h in...