CVE-2018-9058
lrzip: In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of runzip.c
CVE-2018-9058 is fixed in lrzip on 1 platform by lrzip 0.631-1+deb9u1build0.18.04.1 (version 0.631-1+deb9u1build0.18.04.1), released May 26, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0114
66th percentile
In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| lrzip · Ubuntu 18.04.6 LTS (bionic) | 0.631-1+deb9u1build0.18.04.1 | lrzip 0.631-1+deb9u1build0.18.04.1 | May 26, 2018 |