p7zip
| Link | package | bugs open | bugs closed | Wiki | GitHub | web search |
| Description | Command-line file archiver with high compression ratio |
| Version | 1:17.05-2 [extra] |
Open
| Group | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|
| AVG-1733 | 1:17.04-3 | Low | Vulnerable |
| Issue | Group | Severity | Remote | Type | Description |
|---|---|---|---|---|---|
| CVE-2021-3465 | AVG-1733 | Low | No | Denial of service | In p7zip 17.03, the function NCompress::CCopyCoder::Code in CPP/7zip/Common/StreamObjects.cpp will call outStream->Write where a memcpy uses a NULL pointer... |
Resolved
| Group | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|
| AVG-714 | 16.02-4 | 16.02-5 | Critical | Fixed | FS#58907 |
| Issue | Group | Severity | Remote | Type | Description |
|---|---|---|---|---|---|
| CVE-2018-10115 | AVG-714 | Critical | Yes | Arbitrary code execution | An uninitialized memory security issue has been found in the RAR decoder component of 7-Zip before 18.05, resulting in arbitrary code execution. |
Advisories
| Date | Advisory | Group | Severity | Type |
|---|---|---|---|---|
| 09 Jun 2018 | ASA-201806-6 | AVG-714 | Critical | arbitrary code execution |