CVE-2018-5747: Use After Free
In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the ucompthread function (stream.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-5747?
CVE-2018-5747 is a vulnerability in Long Range Zip (lrzip) 0.631 that allows remote attackers to cause a denial of service via a crafted lrz file.
How severe is CVE-2018-5747?
CVE-2018-5747 has a severity rating of 5.5, which is considered medium.
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers using a crafted lrz file to trigger a use-after-free in the ucompthread function, resulting in a denial of service.
Which software versions are affected by CVE-2018-5747?
Long Range Zip (lrzip) version 0.631 and Debian Linux version 9.0 are affected by CVE-2018-5747.
Are there any fixes or patches available?
Yes, fixes and patches are available for CVE-2018-5747. Please refer to the references provided for more information.