CVE-2023-39741

MediumCVSS 5.5

Published: 17/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

In lrzip version 0.651, a heap overflow was discovered in the libzpaq::PostProcessor::write(int) function in /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

Risk Assessment

This vulnerability may lead to service disruption, impacting the availability of services within the organization.

Recommendation

It is recommended to update to the latest version of lrzip to mitigate this vulnerability and to monitor systems for potential DoS attacks.

Original NVD description (English source)

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.