Search CVE reports
21 – 25 of 25 results
CVE-2017-8846
Low prioritySome fixes available 3 of 6
The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted archive.
1 affected package
lrzip
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| lrzip | — | Not affected | Not affected | Fixed | Fixed |
CVE-2017-8845
Low prioritySome fixes available 2 of 9
The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted archive.
1 affected package
lrzip
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| lrzip | Not affected | Not affected | Not affected | Fixed | Fixed |
CVE-2017-8844
Low prioritySome fixes available 3 of 6
The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted archive.
1 affected package
lrzip
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| lrzip | — | Not affected | Not affected | Fixed | Fixed |
CVE-2017-8843
Low prioritySome fixes available 2 of 6
The join_pthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive.
1 affected package
lrzip
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| lrzip | Not affected | Not affected | Not affected | Fixed | Fixed |
CVE-2017-8842
Low prioritySome fixes available 1 of 6
The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted archive.
1 affected package
lrzip
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| lrzip | Not affected | Not affected | Not affected | Fixed | Vulnerable |