CVE-2023-39741: Medium severity long range zip project vulnerability

Published Aug 17, 2023

Updated

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

Affected Software

1 affected component

Long Range Zip Project Long Range Zip=0.651

Event History

Aug 17, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-39741?

CVE-2023-39741 is a vulnerability found in lrzip v0.651 that allows attackers to cause a Denial of Service (DoS) via a crafted file.

How severe is CVE-2023-39741?

CVE-2023-39741 is considered to have a medium severity level with a CVSS score of 5.5.

What software version is affected by CVE-2023-39741?

CVE-2023-39741 affects lrzip v0.651.

How can the heap overflow vulnerability in lrzip v0.651 be exploited?

The heap overflow vulnerability in lrzip v0.651 can be exploited by calling the libzpaq::PostProcessor::write(int) function in libzpaq.cpp with a crafted file.

Is there a fix for CVE-2023-39741?

At the moment, there is no known fix for CVE-2023-39741. It is recommended to update to a patched version when it becomes available.