Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-11612

Опубликовано: 22 нояб. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 6.5

Описание

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

РелизСтатусПримечание
devel

not-affected

24.09+dfsg-7
esm-apps/jammy

deferred

14/4/2025
esm-apps/noble

deferred

14/4/2025
esm-apps/resolute

not-affected

24.09+dfsg-7
esm-infra/focal

DNE

focal

DNE

jammy

deferred

14/4/2025
noble

deferred

14/4/2025
oracular

not-affected

24.08+dfsg-1
plucky

not-affected

24.09+dfsg-7

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

deferred

14/4/2025
esm-apps/bionic

deferred

14/4/2025
esm-apps/focal

deferred

14/4/2025
esm-apps/jammy

deferred

14/4/2025
esm-apps/noble

not-affected

esm-apps/xenial

ignored

end of ESM support, was deferred [14/4/2025]
esm-infra-legacy/trusty

deferred

14/4/2025
focal

ignored

end of standard support, was deferred [14/4/2025]
jammy

deferred

14/4/2025

Показывать по

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

CVSS3: 6.5
debian
больше 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vu ...

CVSS3: 6.5
github
больше 1 года назад

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.

CVSS3: 6.5
fstec
больше 1 года назад

Уязвимость компонента CopyCoder архиватора 7-Zip, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
redos
11 месяцев назад

Множественные уязвимости 7zip

6.5 Medium

CVSS3