USN-3913-1 — p7zip vulnerabilities

Summary

It was discovered that p7zip did not correctly handle certain malformed
archives. If a user or automated system were tricked into processing a specially
crafted archive with p7zip, then p7zip could be made to crash, possibly leading
to abitrary code execution.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	p7zip	9.20.1~dfsg.1-4.2ubuntu0.1

Vulnerabilities 2

Unscored —

CVE-2016-2335

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attack…

p7zip p7zip Debian Ubuntu

Jun 7, 2016
Unscored —

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows …

p7zip p7zip p7zip p7zip Debian Ubuntu Azure Linux Alpine

Jan 30, 2018

References

report
https://ubuntu.com/security/CVE-2016-2335
report
https://ubuntu.com/security/CVE-2017-17969

p7zip vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 2

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attack…

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows …

References