Lucene search
+L

50 matches found

Prion
Prion
•added 2022/07/26 1:15 p.m.•24 views

Design/Logic Flaw

An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread in stream.c:1538...

4.4CVSS7.6AI score0.00365EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/07/26 1:15 p.m.•35 views

CVE-2021-33453

An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread in stream.c:1538...

7.8CVSS7.1AI score0.00365EPSS
SaveExploits1References3
CVE
CVE
•added 2022/07/26 12:36 p.m.•93 views

CVE-2021-33453

CVE-2021-33453 affects lrzip version 0.641, with a use-after-free in ucompthread() in stream.c:1538. The vulnerability is described across multiple sources, with impact ratings in the NVD CVSSv3.1 vector (Local access, User interaction required, Confidentiality/Integrity/Availability impact High)...

7.8CVSS7.6AI score0.00365EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2022/07/26 12:36 p.m.•46 views

CVE-2021-33453

An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread in stream.c:1538...

7.8CVSS7.6AI score0.00365EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/07/26 12:36 p.m.•25 views

CVE-2021-33453

An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread in stream.c:1538...

7.8AI score0.00365EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/26 12:00 a.m.•3 views

CVE-2021-33453: Use After Free

An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread in stream.c:1538...

7.8CVSS7.5AI score0.00365EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•17 views

lrzip 资源管理错误漏洞

lrzip is a compression utility program by the individual developer Con Kolivas. A resource management error vulnerability exists in lrzip version 0.641, which stems from a post-release reuse of ucompthread in its steam.c component...

7.8CVSS7.3AI score0.00365EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/07/26 12:00 a.m.•17 views

PT-2022-10249 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.641 Description: An issue was discovered in the ucompthread function in stream.c at line 1538, which is a use-after-free. Recommendations: For lrzip version 0.641, consider disabling the ucompthread function as a temporary...

7.8CVSS7.5AI score0.00365EPSS
SaveExploits1References12
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•18 views

The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program, related to pointer arithmetic errors, allows a malicious actor to cause a service failure.

The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a specially created compressed file...

6.5CVSS6.3AI score0.00713EPSS
SaveExploits1References5Affected Software3
OSV
OSV
•added 2021/06/10 4:15 p.m.•27 views

CVE-2021-27345

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service DOS via a crafted compressed file...

5.5CVSS6.4AI score
SaveExploits0References2
OSV
OSV
•added 2021/06/10 4:15 p.m.•13 views

UBUNTU-CVE-2021-27345

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service DOS via a crafted compressed file...

5.5CVSS6.4AI score0.00713EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2021/06/10 4:15 p.m.•40 views

CVE-2021-27345

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service DOS via a crafted compressed file...

5.5CVSS6.4AI score0.00713EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/06/10 4:15 p.m.•7 views

CVE-2021-27345

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service DOS via a crafted compressed file...

5.5CVSS5.2AI score0.00713EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2021/06/10 3:45 p.m.•106 views

CVE-2021-27345

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service DOS via a crafted compressed file...

5.5CVSS5.4AI score0.00713EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/06/10 3:45 p.m.•65 views

CVE-2021-27345

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service DOS via a crafted compressed file...

5.5CVSS5.4AI score0.00713EPSS
SaveExploits1
CVE
CVE
•added 2021/06/10 3:45 p.m.•130 views

CVE-2021-27345

CVE-2021-27345 relates to lrzip (Irzip) 0.631, where a null pointer dereference in ucompthread() in stream.c can cause a denial of service via a crafted ZIP file. The vulnerability affects lrzip packages across multiple distros; fixed versions are provided in Debian security advisories (e.g., DSA...

5.5CVSS5.2AI score0.00713EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2021/06/10 12:00 a.m.•15 views

Irzip 代码问题漏洞

Irzip is a compression utility that excels at compressing large files. A null pointer dereference vulnerability exists in ucompthread in stream.c in Irzip version 0.631, which can be exploited by an attacker to cause a denial of service via a specially crafted compressed file...

5.5CVSS5.6AI score0.00713EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/10 12:00 a.m.•3 views

CVE-2021-27345: NULL Pointer Dereference

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service DOS via a crafted compressed file...

5.5CVSS7.9AI score0.00713EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•11 views

PT-2020-6433 · Lrzip +2 · Lrzip +2

Name of the Vulnerable Software and Affected Versions: Lrzip version 0.631 Description: A null pointer dereference was discovered in the ucompthread function in stream.c, which allows attackers to cause a denial of service via a crafted compressed file. The exploitation of this issue may permit a...

9.8CVSS7.1AI score0.01926EPSS
SaveExploits6References40
CNVD
CNVD
•added 2018/01/18 12:00 a.m.•11 views

Long Range Zip ucompthread function memory misreference vulnerability

Long Range Zip also known as lrzip is a compression utility that specializes in compressing large files. A post-release reuse vulnerability exists in the ucompthread function in stream.c in Long Range Zip 0.631. A remote attacker can exploit this vulnerability via a specially crafted lrz file to...

5.5CVSS6.9AI score0.01275EPSS
SaveExploits1References1
Rows per page
Query Builder