CVE-2018-5650

Published: Jan 12, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the unzip_match function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.

Affected (1)

Products: Long Range Zip Project: Long Range Zip

Long Range Zip Project

1 product

Long Range Zip

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Long Range Zip Project Long Range Zip	Version 0.631

Related CWEs

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (4)

https://github.com/ckolivas/lrzip/issues/88

Source: cve@mitre.org

ExploitThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html

Source: cve@mitre.org

https://github.com/ckolivas/lrzip/issues/88

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.