Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-11612

Опубликовано: 22 нояб. 2024
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*
Версия от 24.06 (включая) до 24.08 (исключая)

EPSS

Процентиль: 38%
0.00168
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

CVSS3: 6.5
debian
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vu ...

CVSS3: 6.5
github
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

CVSS3: 6.5
fstec
около 1 года назад

Уязвимость компонента CopyCoder архиватора 7-Zip, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
redos
5 месяцев назад

Множественные уязвимости 7zip

EPSS

Процентиль: 38%
0.00168
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-835