Bug 836350

Summary:	>=app-arch/lrzip-0.650: Multiple concurrency UAF bug (CVE-2022-26291)
Product:	Gentoo Security	Reporter:	filip ambroz <filip.ambroz>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor	CC:	maintainer-needed
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/ckolivas/lrzip/issues/206
Whiteboard:	B3 [stable]
Package list:		Runtime testing required:	---

Description filip ambroz 2022-03-29 06:34:45 UTC

[CVE-2022-26291]
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted Irz file.

Comment 1 filip ambroz 2022-03-29 06:37:37 UTC

Fix: https://github.com/ckolivas/lrzip/commit/4b3942103b57c639c8e0f31d6d5fd7bac53bbdf4

Comment 2 Sam James archtester

2022-03-29 09:15:18 UTC

The >= doesn't make any sense to me given the fix is in 0.650?

Anyway, dupe?

*** This bug has been marked as a duplicate of bug 834456 ***