Required CVE Record Information
Description
In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo function (lrzip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.
References 4 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 4 Total
- https://github.com/ckolivas/lrzip/issues/91 x_transferred
- lists.debian.org: [debian-lts-announce] 20210801 [SECURITY] [DLA 2725-1] lrzip security update mailing-listx_transferred
- lists.debian.org: [debian-lts-announce] 20220413 [SECURITY] [DLA 2981-1] lrzip security update mailing-listx_transferred
- debian.org: DSA-5145 vendor-advisoryx_transferred