CVE-2017-8847

Name of the Vulnerable Software and Affected Versions lrzip version 0.631

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted archive. This is due to a problem in the bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so.

Recommendations For lrzip version 0.631, consider updating to a newer version that contains a fix for this issue, as the current version is affected.