lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted Irz file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade lrzip | Aug 22, 2024 | Mar 28, 2022 |
| Debian | — | Upgrade lrzip | Apr 18, 2022 | Mar 28, 2022 |
| Ubuntu | — | Upgrade lrzipUpgrade lrzip (Ubuntu Pro) | Mar 22, 2023 | Mar 28, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub