Описание
7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| 7zip | fixed | 25.00+dfsg-1 | package | |
| 7zip | fixed | 22.01+really25.01+dfsg-0+deb12u1 | bookworm | package |
| p7zip | fixed | 16.02+transitional.1 | package | |
| p7zip | fixed | 16.02+really25.01+dfsg-0+deb12u1 | bookworm | package |
Примечания
Crash in CLI tool, no security impact
https://securitylab.github.com/advisories/GHSL-2025-059_7-Zip/
https://www.openwall.com/lists/oss-security/2025/07/18/2
Since p7zip/16.02+transitional.1 src:p7zip is only a empty source package
depending on 7zip. Mark this version as fixed version.
EPSS
Связанные уязвимости
7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.
7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.
Уязвимость метода NArchive::NCom::CHandler::GetStream обработчика Compound архиватора 7-Zip, позволяющая нарушителю вызвать отказ в обслуживании
EPSS