CVE-2023-39741

Mô tả

Tham khảo

• gist.github.com/huanglei3/ec9090096aa92445cf0a8baa8e929084
• ckolivas/lrzip · Exploit
• huanglei3/lrzip_poc · Exploit

Lỗ hổng khác của long range zip

• CVE-2021-33453CAO 7.8An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538.
• CVE-2021-33451TRUNG BÌNH 5.5An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c.
• CVE-2022-33067TRUNG BÌNH 5.5Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions get_magic in lrzip.c and Predictor::init in libz…
• CVE-2022-26291TRUNG BÌNH 5.5lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist().…
• CVE-2021-27347TRUNG BÌNH 5.5Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service (DoS) via a crafted co…