Known Vulnerabilities for products from Long Range Zip Project
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Long Range Zip Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-39741 json | lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpa... | 5.5 - MEDIUM | 2023-08-17 | 2023-08-25 |
| CVE-2022-33067 json | Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions get_magic in lrzip.c and Predicto... | 5.5 - MEDIUM | 2022-06-23 | 2022-06-30 |
| CVE-2022-26291 json | lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and ... | 5.5 - MEDIUM | 2022-03-28 | 2022-10-07 |
| CVE-2021-33453 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.8 - HIGH | 2022-07-26 | 2022-08-02 |
| CVE-2021-33451 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.5 - MEDIUM | 2022-07-26 | 2022-08-01 |
| CVE-2021-27347 json | Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service (DoS) v... | 5.5 - MEDIUM | 2021-06-10 | 2022-04-27 |
| CVE-2021-27345 json | A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial ... | 5.5 - MEDIUM | 2021-06-10 | 2022-04-27 |
| CVE-2020-25467 json | A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which allows an attacker to cause a d... | 5.5 - MEDIUM | 2021-06-10 | 2022-04-27 |
| CVE-2019-10654 json | The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote attacke... | 5.5 - MEDIUM | 2019-03-30 | 2022-09-02 |
| CVE-2018-11496 json | In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c... | 6.5 - MEDIUM | 2018-05-26 | 2022-10-06 |
| CVE-2018-10685 json | In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the lzma_decompress_buf function of stream.c, which allows ... | 9.8 - CRITICAL | 2018-05-02 | 2021-08-02 |
| CVE-2018-9058 json | In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of runzip.c. Remote attackers could ... | 5.5 - MEDIUM | 2018-03-27 | 2019-10-03 |
| CVE-2018-5786 json | In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo function (lrzip.c). R... | 5.5 - MEDIUM | 2018-01-19 | 2022-10-07 |
| CVE-2018-5747 json | In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the ucompthread function (stream.c). Remote attackers could... | 5.5 - MEDIUM | 2018-01-17 | 2022-10-06 |
| CVE-2018-5650 json | In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the unzip_match function in runzip.c. ... | 5.5 - MEDIUM | 2018-01-12 | 2021-08-02 |
| CVE-2017-9929 json | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cau... | 5.5 - MEDIUM | 2017-06-26 | 2022-12-09 |
| CVE-2017-9928 json | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to caus... | 5.5 - MEDIUM | 2017-06-26 | 2022-12-09 |
| CVE-2017-8847 json | The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of s... | Not Provided | 2017-05-08 | 2025-04-20 |
| CVE-2017-8846 json | The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-... | Not Provided | 2017-05-08 | 2025-04-20 |
| CVE-2017-8845 json | The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of... | Not Provided | 2017-05-08 | 2025-04-20 |
Known software with vulnerabilities from Long Range Zip Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Long Range Zip Project | Long Range Zip | 0.45 |