Changelog
7zip (22.01+dfsg-8+deb12u1) bookworm; urgency=medium
* Fix CVE-2023-52168 (buffer overflow) and CVE-2023-52169 (buffer over-read)
* CVE-2023-52168: heap-based buffer overflow
NTFS handler allows an attacker to overwrite two bytes at multiple
offsets beyond the allocated buffer size.
* CVE-2023-52169: out-of-bounds read
NTFS handler allows an attacker to read beyond the intended buffer.
The bytes read beyond the intended buffer are presented as a part of
a filename listed in the file system image. This has security relevance
in some known web-service use cases where untrusted users can upload
files and have them extracted by a server-side 7-Zip process.
Detailed report about these issues are available at:
https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/
-- YOKOTA Hiroshi <email address hidden> Fri, 18 Oct 2024 01:45:17 +0900
