7 Zip P7Zip vulnerabilities

5 vulnerabilities

Known vulnerabilities in 7 Zip P7Zip, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2018-59967-zip7-zip+5
EPSS score
2.88%
Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.5.8CVE-2015-10387-zipp7zip+9
EPSS score
3.29%
p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.7.5CVE-2016-92967-zipp7zip+3
EPSS score
7.02%
A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files.7.8CVE-2022-470697-zipp7zip+2
EPSS score
0.32%
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.7.8CVE-2017-179697-zip7-zip+6
EPSS score
4.99%
Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.