CVE-2022-28044
Irzip v0.640 was discovered to contain a heap memory corruption via th ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.17 | lrzip | 0.650-r0 |
| alpine 3.18 | lrzip | 0.650-r0 |
| alpine 3.19 | lrzip | 0.650-r0 |
| alpine 3.20 | lrzip | 0.650-r0 |
| alpine 3.21 | lrzip | 0.650-r0 |
| alpine 3.22 | lrzip | 0.650-r0 |
| alpine 3.23 | lrzip | 0.650-r0 |
| alpine 3.24 | lrzip | 0.650-r0 |
| alpine edge | lrzip | 0.650-r0 |
| debian 10 | lrzip | 0.631+git180528-1+deb10u1 |
| debian 11 | lrzip | 0.641-1+deb11u1 |
| debian 12 | lrzip | 0.650-1 |
Alle 27 Einträge aus 27 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.17 | lrzip | 0.650-r0 |
| alpine 3.18 | lrzip | 0.650-r0 |
| alpine 3.19 | lrzip | 0.650-r0 |
| alpine 3.20 | lrzip | 0.650-r0 |
| alpine 3.21 | lrzip | 0.650-r0 |
| alpine 3.22 | lrzip | 0.650-r0 |
| alpine 3.23 | lrzip | 0.650-r0 |
| alpine 3.24 | lrzip | 0.650-r0 |
| alpine edge | lrzip | 0.650-r0 |
| debian 10 | lrzip | 0.631+git180528-1+deb10u1 |
| debian 11 | lrzip | 0.641-1+deb11u1 |
| debian 12 | lrzip | 0.650-1 |
| debian 13 | lrzip | 0.650-1 |
| debian 14 | lrzip | 0.650-1 |
| debian 9 | lrzip | 0.631-1+deb9u3 |
| echo | lrzip | 0.650-1 |
| rapidfort ubuntu 20.04 | lrzip | 0:0.651-2ubuntu0.22.04.1 |
| rapidfort ubuntu 22.04 | lrzip | 0:0.651-2ubuntu0.22.04.1 |
| rapidfort ubuntu 24.04 | lrzip | 0:0.651-2ubuntu0.22.04.1 |
| ubuntu 14.04-ESM | lrzip | 0.616-1ubuntu0.1~esm2 |
| ubuntu 16.04-ESM | lrzip | 0.621-1ubuntu0.1~esm2 |
| ubuntu 18.04 | lrzip | 0.631-1+deb9u3build0.18.04.1 |
| ubuntu 18.04-ESM | lrzip | 0.631-1+deb9u3build0.18.04.1 |
| ubuntu 20.04 | lrzip | 0.631+git180528-1+deb10u1build0.20.04.1 |
| ubuntu 20.04-ESM | lrzip | 0.631+git180528-1+deb10u1build0.20.04.1 |
| ubuntu 22.04 | lrzip | 0.651-2ubuntu0.22.04.1 |
| ubuntu 22.10 | lrzip | 0.651-2ubuntu0.22.10.1 |
Referenzen
- https://github.com/ckolivas/lrzip/commit/5faf80cd53ecfd16b636d653483144cd12004f46
- https://github.com/ckolivas/lrzip/issues/216
- https://lists.debian.org/debian-lts-announce/2022/05/msg00016.html
- https://ubuntu.com/security/notices/USN-5840-1
- https://www.cve.org/CVERecord?id=CVE-2022-28044
- https://www.debian.org/security/2022/dsa-5145