Unrated severityNVD Advisory· Published Aug 17, 2023· Updated Oct 8, 2024

CVE-2023-39741

Description

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

lrzip/lrzipdescription
Ckolivas/Lrzipllm-fuzzy
Range: =0.651

Patches

Vulnerability mechanics

References

gist.github.com/huanglei3/ec9090096aa92445cf0a8baa8e929084mitre
github.com/ckolivas/lrzip/issues/246mitre
github.com/huanglei3/lrzip_poc/tree/main/lrzip_heap_overflowmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000