CVE-2019-10654: Medium severity long range zip project vulnerability
Published Mar 30, 2019
·Updated
The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted archive, a different vulnerability than CVE-2017-8845.
Affected Software
1 affected component
Long Range Zip Project Long Range Zip=0.631
Event History
Mar 30, 2019
CVE Published
via MITRE·02:36 PM
Data Sourced
via MITRE·02:36 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-10654.
2
What is the severity of CVE-2019-10654?
The severity of CVE-2019-10654 is medium with a severity value of 5.5.
3
What is the affected software?
The affected software is Long Range Zip (lrzip) version 0.631.
4
How does CVE-2019-10654 affect the affected software?
CVE-2019-10654 allows remote attackers to cause a denial of service by exploiting a vulnerability in the lzo1x_decompress function in liblzo2.so.2.
5
Is there a fix available for CVE-2019-10654?
At the moment, there is no available fix for CVE-2019-10654. It is recommended to update to a newer version if one becomes available.