CVE-2018-10685

Name of the Vulnerable Software and Affected Versions Long Range Zip (aka lrzip) version 0.631

Description The issue is related to a use-after-free in the lzma decompress buf function of stream.c, allowing remote attackers to cause a denial of service, such as an application crash, or possibly have other unspecified impacts.

Recommendations For Long Range Zip (aka lrzip) version 0.631, as a temporary workaround, consider disabling the lzma decompress buf function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.