An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c.
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Link | Tags |
---|---|
https://github.com/ckolivas/lrzip/issues/198 | issue tracking exploit third party advisory |
https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d | third party advisory exploit |