PT-2022-10247 · Lrzip+1 · Lrzip+1

Clingto · Published 2022-07-26 · Updated 2022-08-01 · CVE-2021-33451

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions lrzip version 0.641

Description An issue was discovered in the fill buffer() function in stream.c, which results in memory leaks.

Recommendations For lrzip version 0.641, consider updating to a newer version that addresses the memory leak issue in the fill buffer() function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2021-33451

Affected Products

Debian

Lrzip

References · 10

• 🔥 https://github.com/ckolivas/lrzip/issues/198 · Exploit
• 🔥 https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d · Exploit
• https://osv.dev/vulnerability/CVE-2021-33451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33451 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-33451 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-33451 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-33451 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-33451 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33451 · Vendor Advisory
• https://t.me/cibsecurity/46978 · Telegram Post