CVE-2017-9929: Buffer Overflow
Published Jun 26, 2017
·Updated
In lrzip 0.631, a stack buffer overflow was found in the function getfileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file.
Affected Software
2 affected components
Long Range Zip Project Long Range Zip=0.631
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Jun 26, 2017
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9929?
CVE-2017-9929 is classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2017-9929?
To fix CVE-2017-9929, upgrade lrzip to a version later than 0.631 that contains the patch for the vulnerability.
3
Which versions are affected by CVE-2017-9929?
CVE-2017-9929 affects lrzip version 0.631 and Debian 9.0.
4
What type of vulnerability is CVE-2017-9929?
CVE-2017-9929 is a stack buffer overflow vulnerability.
5
Can CVE-2017-9929 be exploited remotely?
Yes, CVE-2017-9929 can be exploited remotely through crafted files.