Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c lacks certain size validation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Long Range Zip 安全漏洞
Vulnerability Description
Long Range Zip（又名lrzip）是一款开源的压缩实用程序，适用于大文件的压缩。 lrzip 0.631版本中的stream.c文件的‘read_stream’函数存在释放后重用漏洞，该漏洞源于lrzip.c文件中的decompress_file没有校验大小值。远程攻击者可通过诱使用户打开特制的文件利用该漏洞造成应用程序崩溃。
CVSS Information
N/A
Vulnerability Type
N/A