Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35134
HistoryApr 17, 2022 - 3:50 a.m.

Denial Of Service (DoS)

2022-04-1703:50:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
lrzip
denial of service
vulnerability
get_fileinfo function
crafted lrz file
remote attacker

EPSS

0.002

Percentile

54.8%

lrzip is vulnerable to denial of service. The vulnerability exists because there is an infinite loop and application hang in the get_fileinfo function in lrzip.c which allows a remote attacker to cause a denial of service via a crafted lrz file.