Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jrq3-7p6q-9m8h

Опубликовано: 22 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

EPSS

Процентиль: 38%
0.00168
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

CVSS3: 6.5
nvd
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

CVSS3: 6.5
debian
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vu ...

CVSS3: 6.5
fstec
около 1 года назад

Уязвимость компонента CopyCoder архиватора 7-Zip, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
redos
5 месяцев назад

Множественные уязвимости 7zip

EPSS

Процентиль: 38%
0.00168
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-835