Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/02/11 7:45 p.m.2 views

CVE-2025-15571

A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompthread of the file stream.c. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been disclosed public...

5.5CVSS5AI score0.00027EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2026/02/10 2:32 p.m.1 views

CVE-2025-15571

A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompthread of the file stream.c. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been disclosed public...

5.5CVSS5.5AI score0.00027EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.1 views

lrzip 代码问题漏洞

lrzip is a compression utility personally developed by Con Kolivas. Versions of lrzip prior to 0.651 contained code vulnerabilities, which stemmed from a null pointer dereferencing issue in the ucompthread function...

5.5CVSS5.8AI score0.00027EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2022/07/26 12:0 a.m.3 views

PT-2022-10249 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.641 Description: An issue was discovered in the ucompthread function in stream.c at line 1538, which is a use-after-free. Recommendations: For lrzip version 0.641, consider disabling the ucompthread function as a temporary...

7.8CVSS7.5AI score0.00049EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2020/09/02 12:0 a.m.2 views

PT-2020-6433 · Lrzip +2 · Lrzip +2

Name of the Vulnerable Software and Affected Versions: Lrzip version 0.631 Description: A null pointer dereference was discovered in the ucompthread function in stream.c, which allows attackers to cause a denial of service via a crafted compressed file. The exploitation of this issue may permit a...

9.8CVSS7.1AI score0.01045EPSS
Exploits6References40
CNVD
CNVD
added 2018/01/18 12:0 a.m.1 views

Long Range Zip ucompthread function memory misreference vulnerability

Long Range Zip also known as lrzip is a compression utility that specializes in compressing large files. A post-release reuse vulnerability exists in the ucompthread function in stream.c in Long Range Zip 0.631. A remote attacker can exploit this vulnerability via a specially crafted lrz file to...

5.5CVSS6.9AI score0.00211EPSS
Exploits1References1
NVD
NVD
added 2018/01/17 7:29 p.m.13 views

CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS5.8AI score0.00211EPSS
Exploits1References2
Prion
Prion
added 2018/01/17 7:29 p.m.8 views

Design/Logic Flaw

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

4.3CVSS6AI score0.00211EPSS
Exploits1References2Affected Software2
Cvelist
Cvelist
added 2018/01/17 7:0 p.m.18 views

CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

6AI score0.00211EPSS
Exploits1References2
CVE
CVE
added 2018/01/17 7:0 p.m.62 views

CVE-2018-5747

CVE-2018-5747 is a use-after-free in lrzip 0.631 (Long Range ZIP) within ucompthread (stream.c) that could allow a remote attacker to cause a denial of service via a crafted lrz file. Affected product is lrzip; root cause is use-after-free in the decoding/stream path. Debian DLA-2725 fixes this i...

5.5CVSS5.8AI score0.00211EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2018/01/17 12:0 a.m.2 views

PT-2018-17121 · Lrzip +1 · Long Range Zip +1

Name of the Vulnerable Software and Affected Versions: Long Range Zip aka lrzip version 0.631 Description: The issue is related to a use-after-free in the ucompthread function, located in stream.c. This could allow remote attackers to cause a denial of service by providing a crafted lrz file...

9.8CVSS5.8AI score0.00843EPSS
Exploits6References45
Rows per page
Query Builder