DSA-4104: -1 p7zip -- security update
'landave' discovered a heap-based buffer overflow vulnerability in the NCompress::NShrink::CDecoder::CodeReal method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the execution of arbitrary code with the privileges of the user running p7zip, if a specially crafted shrinked ZIP archive is processed.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users or services that run p7zip and process ZIP archives are exposed, particularly when handling archives from remote or untrusted sources. Successful exploitation would occur with the privileges of the user running p7zip.
What does an attacker need to exploit the vulnerability?
An attacker needs to cause p7zip to process a specially crafted shrinked ZIP archive. The issue may result in denial of service or potentially arbitrary code execution.
How can I reduce risk before applying the security update?
Avoid processing untrusted or remotely supplied shrinked ZIP archives with p7zip until the security update can be applied. Restricting the privileges of accounts or services that run p7zip limits the privileges available to potential code execution.