CVE-2018-9058: Medium severity Long Range Zip Project Long Range Zip vulnerability
Published Mar 27, 2018
·Updated
In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzipfd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.
Affected Software
1 affected component
Long Range Zip Project Long Range Zip=0.631
Event History
Mar 27, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for the Long Range Zip (lrzip) vulnerability?
The vulnerability ID for the Long Range Zip (lrzip) vulnerability is CVE-2018-9058.
2
What is the severity level of CVE-2018-9058?
CVE-2018-9058 has a severity level of medium with a severity value of 5.5.
3
How can an attacker exploit CVE-2018-9058?
An attacker can exploit CVE-2018-9058 by leveraging the infinite loop in the runzip_fd function of runzip.c using a crafted lrz file.
4
What is the affected software version?
The affected software version is Long Range Zip (lrzip) 0.631.
5
Is there a fix available for CVE-2018-9058?
At the moment, there is no official fix available for CVE-2018-9058. It is recommended to apply any patches or updates provided by the software vendor.