tocsin

Debian/p7zip: high 7.8

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.

Action: Upgrade p7zip to 15.14.1+dfsg-2 or later.

Affected

introducedfixedlast affected
015.14.1+dfsg-2-

Fixed versions

15.14.1+dfsg-2

Sources

published · modified · JSON