CVE-2017-8847: NULL Pointer Dereference

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive...

PT-2017-18574 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer overflow and application crash, or possibly have other unspecified impacts via a crafted archive. This is due to...

CVE-2017-8844: Improper Restriction of Operations within the Bounds of a Memory Buffer

The read1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted archive...

CVE-2017-8846: Use After Free

The readstream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted archive...

PT-2017-18573 · Lrzip · Lrzip

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted archive. This is due to a problem in the join pthread function in...

PT-2017-18577 · Lrzip · Lrzip

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted archive. This is due to a problem in the bufRead::get function in...

PT-2017-18572 · Lrzip · Lrzip

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue is related to a divide-by-zero error and application crash that can be triggered by remote attackers via a crafted archive. This is caused by the bufRead::get function in libzpaq/libzpaq.h in...

CVE-2017-8842: Divide By Zero

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...

PT-2017-18576 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted archive. This is due to a problem in the read stream function in stream.c in...

CVE-2017-8843: NULL Pointer Dereference

The joinpthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive...