Medium severity5.5OSV Advisory· Published Jan 19, 2018· Updated Jun 17, 2026

CVE-2018-5786

Description

In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo function (lrzip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Long Range Zip Project/Long Range ZipOSV2 versions
v0.45, v0.46, v0.47, …+ 1 more
- (no CPE)range: v0.45, v0.46, v0.47, …
- cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Lrzip/lrzipllm-create
Range: 0.631

Patches

Vulnerability mechanics

References

github.com/ckolivas/lrzip/issues/91nvdExploitIssue TrackingPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2021/08/msg00001.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2022/04/msg00012.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2022/dsa-5145nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000