Known vulnerabilities in lrzip

Vendor: ckolivas (Con Kolivas)
Software: lrzip
Software CPE: cpe:2.3:a:ckolivas:lrzip:*:*:*:*:*:*:*:*
Website: https://github.com/ckolivas/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting lrzip lrzip is affected by 17 known vulnerabilities: 1 high, 11 medium, 5 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63644 - Use After Free
CVE-2021-27347		 CWE-416 Low
No
No
 0.640 25.05.2022 SB2017050809
SB2022052602
SB2023020245
#VU63643 - NULL Pointer Dereference
CVE-2020-25467		 CWE-476 Low
No
No
 0.630 25.05.2022 SB2021061023
SB2022052602
SB2023020245
#VU63641 - NULL Pointer Dereference
CVE-2021-27345		 CWE-476 Low
No
No
 0.640 25.05.2022 SB2017050809
SB2022052602
SB2023020245
#VU63640 - Out-of-bounds write
CVE-2022-28044		 CWE-787 High
No
No
 0.641 25.05.2022 SB2022052520
SB2022052602
SB2023020245
#VU63638 - Use After Free
CVE-2022-26291		 CWE-416 Low
No
No
 0.650 25.05.2022 SB2022052521
SB2022052602
SB2023020245
#VU63637 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-5786		 CWE-835 Low
No
No
 0.641 25.05.2022 SB2018011919
SB2022052602
SB2023020245
#VU36034 - Out-of-bounds read
CVE-2019-10654		 CWE-125 Medium
No
No
 0.640 30.03.2019 SB2017050809
#VU37109 - Use After Free
CVE-2018-11496		 CWE-416 Medium
No
No
 0.640 26.05.2018 SB2017050809
#VU37629 - Use After Free
CVE-2018-5747		 CWE-416 Medium
No
No
 0.640 17.01.2018 SB2017050809
#VU38812 - Memory corruption
CVE-2017-9928		 CWE-119 Medium
No
No
 0.640 26.06.2017 SB2017050809
SB2020051288
#VU38813 - Memory corruption
CVE-2017-9929		 CWE-119 Medium
No
No
 0.640 26.06.2017 SB2017050809
SB2020051288
#VU39065 - Divide By Zero
CVE-2017-8842		 CWE-369 Medium
No
No
 0.640 08.05.2017 SB2017050809
SB2020051288
#VU39066 - NULL Pointer Dereference
CVE-2017-8843		 CWE-476 Medium
No
No
 0.640 08.05.2017 SB2017050809
SB2020051288
#VU39067 - Heap-based Buffer Overflow
CVE-2017-8844		 CWE-122 Medium
No
No
 0.640 08.05.2017 SB2017050809
SB2020051288
#VU39068 - Out-of-bounds read
CVE-2017-8845		 CWE-125 Medium
No
No
 0.640 08.05.2017 SB2017050809
SB2020051288
#VU39069 - Use After Free
CVE-2017-8846		 CWE-416 Medium
No
No
 0.640 08.05.2017 SB2017050809
SB2020051288
#VU39070 - NULL Pointer Dereference
CVE-2017-8847		 CWE-476 Medium
No
No
 0.640 08.05.2017 SB2017050809
SB2020051288