CVE-2020-25467: Null Pointer Dereference
Published Jun 10, 2021
·Updated
A null pointer dereference was discovered lzodecompressbuf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service (DOS) via a crafted compressed file.
Affected Software
2 affected components
Long Range Zip Project Long Range Zip=0.621
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Jun 10, 2021
CVE Published
via MITRE·03:41 PM
Data Sourced
via MITRE·03:41 PM
Description
Frequently Asked Questions
1
What is CVE-2020-25467?
CVE-2020-25467 is a vulnerability that allows an attacker to cause a denial of service (DOS) by exploiting a null pointer dereference in the lzo_decompress_buf function in Irzip 0.621.
2
How severe is CVE-2020-25467?
CVE-2020-25467 has a severity score of 5.5, which is considered medium.
3
What software versions are affected by CVE-2020-25467?
Irzip 0.621 and Debian Linux 9.0 are affected by CVE-2020-25467.
4
How can an attacker exploit CVE-2020-25467?
An attacker can exploit CVE-2020-25467 by crafting a compressed file that triggers a null pointer dereference in the lzo_decompress_buf function.
5
Are there any references for CVE-2020-25467?
Yes, you can find references for CVE-2020-25467 at the following links: [1] [2] [3]