This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-27345 →

DEBIAN-CVE-2021-27345

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service (DOS) via a cr...

Original description

The description as published by the source.

A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service (DOS) via a crafted compressed file.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 lrzip

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.640-1"}]}]

Debian:13 lrzip

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.640-1"}]}]

Debian:14 lrzip

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.640-1"}]}]

References

advisory security-tracker.debian.org