CVE-2017-17969Out-of-bounds Write in P7zip

Severity
7.8HIGHNVD
EPSS
2.5%
top 14.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 30
Latest updateMay 14

Description

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages25 packages

NVD7-zip/p7zip< 18.0
debiandebian/p7zip< p7zip 16.02+dfsg-5 (bookworm)
Debian7-zip/p7zip< 16.02+dfsg-5+2

Also affects: Debian Linux 7.0, 8.0, 9.0

🔴Vulnerability Details

2
GHSA
GHSA-5mfm-p22h-8c37: Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 182022-05-14
OSV
CVE-2017-17969: Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 182018-01-30

📋Vendor Advisories

4
Ubuntu
P7ZIP vulnerabilities2019-03-21
Red Hat
p7zip: heap-based buffer overflow in 7zip/Compress/ShrinkDecoder.cpp can allow an attacker to write arbitrary data and cause a crash2018-01-25
Microsoft
Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentiall2018-01-09
Debian
CVE-2017-17969: p7zip - Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method ...2017

💬Community

3
Bugzilla
CVE-2017-17969 p7zip: heap-based buffer overflow in 7zip/Compress/ShrinkDecoder.cpp can allow an attacker to write arbitrary data and cause a crash [fedora-all]2018-01-25
Bugzilla
CVE-2017-17969 p7zip: heap-based buffer overflow in 7zip/Compress/ShrinkDecoder.cpp can allow an attacker to write arbitrary data and cause a crash [epel-all]2018-01-25
Bugzilla
CVE-2017-17969 p7zip: heap-based buffer overflow in 7zip/Compress/ShrinkDecoder.cpp can allow an attacker to write arbitrary data and cause a crash2018-01-25
CVE-2017-17969 — Out-of-bounds Write in 7-zip P7zip | cvebase