Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-11612

Опубликовано: 22 нояб. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.5

Описание

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

РелизСтатусПримечание
devel

not-affected

24.09+dfsg-7
esm-apps/jammy

deferred

14/4/2025
esm-apps/noble

deferred

14/4/2025
esm-infra/focal

DNE

focal

DNE

jammy

deferred

14/4/2025
noble

deferred

14/4/2025
oracular

not-affected

24.08+dfsg-1
plucky

not-affected

24.09+dfsg-7
questing

not-affected

24.09+dfsg-7

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

deferred

14/4/2025
esm-apps/focal

deferred

14/4/2025
esm-apps/jammy

deferred

14/4/2025
esm-apps/noble

not-affected

esm-apps/xenial

deferred

14/4/2025
esm-infra-legacy/trusty

deferred

14/4/2025
focal

ignored

end of standard support, was deferred [14/4/2025]
jammy

deferred

14/4/2025
noble

not-affected

16.02+transitional.1

Показывать по

EPSS

Процентиль: 38%
0.00168
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

CVSS3: 6.5
debian
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vu ...

CVSS3: 6.5
github
около 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

CVSS3: 6.5
fstec
около 1 года назад

Уязвимость компонента CopyCoder архиватора 7-Zip, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
redos
5 месяцев назад

Множественные уязвимости 7zip

EPSS

Процентиль: 38%
0.00168
Низкий

6.5 Medium

CVSS3