CVE-2017-8846: Debian Linux

Medium severity, CVSS 5.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted archive.

Affected products

• Debian Debian Linux: version 9.0 only
• Long Range Zip Project Long Range Zip: version 0.631 only

Published 2017-05-08. Last modified 2026-06-17.