CVE-2017-8846
—CVSS 3.1
5.5 medium
EPSS
2%p74
Published
()
Modified
Description
The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted archive.
- Vendors
- long range zip projectdebian
- Products
- long range zip, debian linux
- Weakness
- CWE-416
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.