The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5840-1 advisory.

  - In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo     function (lrzip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a     crafted lrz file. (CVE-2018-5786)

  - A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which allows an     attacker to cause a denial of service (DOS) via a crafted compressed file. (CVE-2020-25467)

  - A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers     to cause a denial of service (DOS) via a crafted compressed file. (CVE-2021-27345)

  - Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to cause Denial     of Service (DoS) via a crafted compressed file. (CVE-2021-27347)

  - lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions     zpaq_decompress_buf() and clear_rulist(). This vulnerability allows attackers to cause a Denial of Service     (DoS) via a crafted Irz file. (CVE-2022-26291)

  - Irzip v0.640 was discovered to contain a heap memory corruption via the component     lrzip.c:initialise_control. (CVE-2022-28044)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 22.10 : Long Range ZIP vulnerabilities (USN-5840-1)

critical Nessus Plugin ID 170961

Version 1.1

Version 1.0

Version 1.1 Feb 2, 2023, 11:54 PM Regenerated based on advisory update
Version 1.0 Feb 2, 2023, 7:54 PM New