CVE-2017-8844

概要

参考情報

• blogs.gentoo.org/ago/2017/05/07/lrzip-heap-based-buffer-overflow-write-in-read_1g-stream-c · Third Party Advisory
• ckolivas/lrzip · Issue Tracking
• lists.debian.org/debian-lts-announce/2021/08/msg00001.html · Mailing List
• security.gentoo.org/glsa/202005-01 · Third Party Advisory

long range zip のその他の脆弱性

• CVE-2023-39741中 5.5lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vul…
• CVE-2021-33453高 7.8An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538.
• CVE-2021-33451中 5.5An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c.
• CVE-2022-33067中 5.5Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions get_magic in lrzip.c and Predictor::init in libz…
• CVE-2022-26291中 5.5lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist().…