251 matches found
SUSE-SU-2024:2475-1 Security update for p7zip
This update for p7zip fixes the following issues: - CVE-2023-52168: Fixed heap-based buffer overflow in the NTFS handler allows two bytes to be overwritten at multiple offsets bsc1227358 - CVE-2023-52169: Fixed out-of-bounds read in NTFS handler bsc1227359...
CBL Mariner 2.0 Security Update: p7zip (CVE-2016-9296)
The version of p7zip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9296 advisory. - A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check...
CBL Mariner 2.0 Security Update: p7zip (CVE-2017-17969)
The version of p7zip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-17969 advisory. - Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7z...
CBL Mariner 2.0 Security Update: p7zip (CVE-2018-5996)
The version of p7zip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-5996 advisory. - Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip...
OPENSUSE-SU-2024:10322-1 p7zip-16.02-2.1 on GA media
These are all security issues fixed in the p7zip-16.02-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11137-1 p7zip-16.02-11.3 on GA media
These are all security issues fixed in the p7zip-16.02-11.3 package on the GA media of openSUSE Tumbleweed...
CVE-2018-5996 affecting package p7zip for versions less than 16.02-23
CVE-2018-5996 affecting package p7zip for versions less than 16.02-23. A patched version of the package is available...
CVE-2016-9296 affecting package p7zip for versions less than 16.02-23
CVE-2016-9296 affecting package p7zip for versions less than 16.02-23. A patched version of the package is available...
CVE-2017-17969 affecting package p7zip for versions less than 16.02-23
CVE-2017-17969 affecting package p7zip for versions less than 16.02-23. A patched version of the package is available...
Medium: p7zip
Issue Overview: p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. CVE-2022-47069 Affected Packages: p7zip Note: This advisory is applicable to Amazon Linux 2 - Graphicsmagick1.3...
Amazon Linux 2023 : p7zip, p7zip-plugins (ALAS2023-2024-481)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-481 advisory. p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. CVE-2022-47069 Tenable has extracted...
Medium: p7zip
Issue Overview: p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. CVE-2022-47069 Affected Packages: p7zip Issue Correction: Run dnf update p7zip --releasever 2023.3.20240108 to upda...
Medium: p7zip
Issue Overview: p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. CVE-2022-47069 Affected Packages: p7zip Issue Correction: Run dnf update p7zip --releasever 2023.3.20240108 or dnf...
Number withdrawn
p7zip is a compression software. This CVE number is withdrawn...
CVE-2022-47069
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
CVE-2022-47069
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
AZL-35094 CVE-2022-47069 affecting package p7zip 16.02-23
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
DEBIAN-CVE-2022-47069
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
