In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafted file.
| Software | From | Fixed in |
|---|---|---|
| long_range_zip_project / long_range_zip | 0.631 | 0.631.x |
| debian / debian_linux | 9.0 | 9.0.x |