https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:29:09 +0000 https://cve.radiocsirt.org/vuln/certfr-2018-avi-350 certfr-2018-avi-350 https://cve.radiocsirt.org/vuln/certfr-2018-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2018-04618 cnvd-2018-04618 https://cve.radiocsirt.org/vuln/cnvd-2018-04618 https://cve.radiocsirt.org/vuln/euvd-2026-210096 EUVD-2026-210096 https://cve.radiocsirt.org/vuln/euvd-2026-210096 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17969 <p>Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.</p> <p>Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-17969 https://cve.radiocsirt.org/vuln/ghsa-5mfm-p22h-8c37 <p>Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.</p> <p>Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.</p> https://cve.radiocsirt.org/vuln/ghsa-5mfm-p22h-8c37 https://cve.radiocsirt.org/vuln/gsd-2017-17969 gsd-2017-17969 https://cve.radiocsirt.org/vuln/gsd-2017-17969 https://cve.radiocsirt.org/vuln/msrc_cve-2017-17969 msrc_CVE-2017-17969 https://cve.radiocsirt.org/vuln/msrc_cve-2017-17969 https://cve.radiocsirt.org/vuln/oesa-2021-1294 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP2: p7zip</p> <p>7za for Linux system to archive file as 7z file format Security Fix(es): Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.(CVE-2017-17969) Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.(CVE-2018-5996) Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.(CVE-2018-10115) A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files.(CVE-2016-9296)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP2: p7zip</p> <p>7za for Linux system to archive file as 7z file format Security Fix(es): Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.(CVE-2017-17969) Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.(CVE-2018-5996) Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.(CVE-2018-10115) A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files.(CVE-2016-9296)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1294 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11137-1 <p>p7zip-16.02-11.3 on GA media</p> <p>p7zip-16.02-11.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11137-1 https://cve.radiocsirt.org/vuln/suse-su-2018:0464-1 <p>Security update for p7zip</p> <p>Security update for p7zip</p> https://cve.radiocsirt.org/vuln/suse-su-2018:0464-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17969 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: p7zip, Ubuntu:16.04:LTS: p7zip</p> <p>Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: p7zip, Ubuntu:16.04:LTS: p7zip</p> <p>Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17969