Vulnerabilities > CVE-2020-25467 - NULL Pointer Dereference vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
long-range-zip-project
debian
CWE-476
NVD
Published: 2021-06-10
Updated: 2024-11-21

Summary

A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service (DOS) via a crafted compressed file.

Vulnerable Configurations

Part Description Count
Application
Long_Range_Zip_Project
1
OS
Debian
1

Common Weakness Enumeration (CWE)

References