Описание
7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| 7zip-rar | fixed | 25.00+ds-1 | package | |
| p7zip-rar | fixed | 16.02+transitional.1 | package | |
| p7zip-rar | no-dsa | bookworm | package |
Примечания
https://securitylab.github.com/advisories/GHSL-2025-058_7-Zip/
https://www.openwall.com/lists/oss-security/2025/07/18/1
Since p7zip-rar/16.02+transitional.1 src:p7zip-rar is only a empty source package
depending on 7zip-rar. Mark this version as fixed version.
EPSS
Связанные уязвимости
7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.
7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.
Уязвимость метода NCompress::NRar5::CDecoder декодера RAR5 архиватора 7-Zip, позволяющая нарушителю вызвать отказ в обслуживании
EPSS