251 matches found
Astra Linux – Vulnerability in p7zip
7-ZIP CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition in affected installations of 7-ZIP. Interaction with this library is required to exploit this vulnerability, but the attack vectors may vary depending ...
Astra Linux – Vulnerability in p7zip
7-Zip 22.01 does not report an error for certain invalid xz files that involve stream flags and reserved bits. Some later versions are unaffected...
Astra Linux – Vulnerability in p7zip
7-Zip 22.01 does not report an error for certain invalid xz files that involve block flags and reserved bits. Some later versions are unaffected...
[SECURITY] [DLA 4719-1] p7zip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4719-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 05, 2026 https://wiki.debian.org/LTS -...
Debian dla-4719 : p7zip - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4719 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4719-1 [email protected]...
[SECURITY] [DLA 4681-1] p7zip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4681-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler July 13, 2026 https://wiki.debian.org/LTS -...
Symlink Attack
Overview bbot is an OSINT automation for hackers. Affected versions of this package are vulnerable to Symlink Attack in the unarchive process when extracting zip or 7z archives containing symlink entries with a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. An...
CVE-2026-14966
BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. Such an archive, downloaded and extracted...
Linux Distros Unpatched Vulnerability : CVE-2026-48104
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archive handler caused by...
Linux Distros Unpatched Vulnerability : CVE-2026-48095
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in t...
Linux Distros Unpatched Vulnerability : CVE-2026-48102
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of- bounds read of up to 3 bytes in the UDF disc image...
[SECURITY] [DLA 4576-1] p7zip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4576-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 11, 2026 https://wiki.debian.org/LTS -...
Debian dla-4576 : p7zip - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4576 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4576-1 [email protected]...
MAL-2026-790 Malicious code in p7zip-full (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 af6725a21a64c36ce8e101fd062bb45cb87fdb8cb62df47538390c6c1fc4323c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Amazon Linux 2023 : p7zip, p7zip-plugins (ALAS2023-2025-1250)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1250 advisory. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack...
openSUSE Security Advisory (SUSE-SU-2025:3791-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : p7zip (SUSE-SU-2025:3791-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3791-1 advisory. - CVE-2022-47069: heap buffer overflow in ZipIn.cpp file bsc1209648. - CVE-2025-53817: null...
Security update for p7zip
This update for p7zip fixes the following issues: CVE-2022-47069: heap buffer overflow in ZipIn.cpp file bsc1209648. CVE-2025-53817: null pointer dereference may lead to denial of service bsc1246707. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...
SUSE-SU-2025:3791-1 Security update for p7zip
This update for p7zip fixes the following issues: - CVE-2022-47069: heap buffer overflow in ZipIn.cpp file bsc1209648. - CVE-2025-53817: null pointer dereference may lead to denial of service bsc1246707...
