CVE-2018-5650
lrzip: In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the unzip_match function in ru...
CVE-2018-5650 is fixed in lrzip on 1 platform by lrzip 0.631-1+deb9u1build0.18.04.1 (version 0.631-1+deb9u1build0.18.04.1), released May 26, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0117
67th percentile
In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the unzip_match function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| lrzip · Ubuntu 18.04.6 LTS (bionic) | 0.631-1+deb9u1build0.18.04.1 | lrzip 0.631-1+deb9u1build0.18.04.1 | May 26, 2018 |