Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.

The version of p7zip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-17969 advisory.

  - Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and     p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute     arbitrary code via a crafted ZIP archive. (CVE-2017-17969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3913-1 advisory.

    It was discovered that p7zip did not correctly handle certain malformed archives. If a user or automated     system were tricked into processing a specially crafted archive with p7zip, then p7zip could be made to     crash, possibly leading to abitrary code execution.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of 7-Zip installed on the remote Windows host is prior to 18.0. It is, therefore, affected by multiple vulnerabilities.

This update for p7zip fixes the following security issues :

  - CVE-2016-1372: Fixed multiple vulnerabilities when     processing crafted 7z files (bsc#984650)

  - CVE-2017-17969: Fixed a heap-based buffer overflow in a     shrink decoder (bsc#1077725)

  - CVE-2018-5996: Fixed memory corruption in RAR     decompression. The complete RAR decoder was removed as     it also has license issues (bsc#1077724 bsc#1077978)

This update was imported from the SUSE:SLE-12:Update update project.

This update for p7zip fixes the following issues: Security issues fixed :

  - CVE-2016-1372: Fixed multiple vulnerabilities when     processing crafted 7z files (bsc#984650)

  - CVE-2017-17969: Fixed a heap-based buffer overflow in a     shrink decoder (bsc#1077725)

  - CVE-2018-5996: Fixed memory corruption in RAR     decompression. The complete RAR decoder was removed as     it also has license issues (bsc#1077724 bsc#1077978)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Improve security patch

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Improved security patch

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

MITRE reports :

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.

Security fix for CVE-2017-17969 (from Debian)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

'landave' discovered a heap-based buffer overflow vulnerability in the NCompress::NShrink::CDecoder::CodeReal method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the execution of arbitrary code with the privileges of the user running p7zip, if a specially crafted shrinked ZIP archive is processed.

The p7zip package has a heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip which allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.

For Debian 7 'Wheezy', these problems have been fixed in version 9.20.1~dfsg.1-4+deb7u3.

We recommend that you upgrade your p7zip packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
201702	CBL Mariner 2.0 Security Update: p7zip (CVE-2017-17969)	Nessus	MarinerOS Local Security Checks	high
123074	Ubuntu 16.04 LTS : P7ZIP vulnerabilities (USN-3913-1)	Nessus	Ubuntu Local Security Checks	high
109800	7-Zip < 18.00 Multiple Vulnerabilities	Nessus	Windows	high
106920	openSUSE Security Update : p7zip (openSUSE-2018-188)	Nessus	SuSE Local Security Checks	high
106897	SUSE SLED12 / SLES12 Security Update : p7zip (SUSE-SU-2018:0464-1)	Nessus	SuSE Local Security Checks	high
106878	Fedora 26 : p7zip (2018-7edc48be11)	Nessus	Fedora Local Security Checks	high
106821	Fedora 27 : p7zip (2018-29232aa760)	Nessus	Fedora Local Security Checks	high
106735	FreeBSD : p7zip -- heap-based buffer overflow (6d337396-0e4a-11e8-94c0-5453ed2e2b49)	Nessus	FreeBSD Local Security Checks	high
106648	Fedora 27 : p7zip (2018-f8ad787538)	Nessus	Fedora Local Security Checks	high
106645	Fedora 26 : p7zip (2018-cd4311d4d6)	Nessus	Fedora Local Security Checks	high
106593	Debian DSA-4104-1 : p7zip - security update	Nessus	Debian Local Security Checks	high
106591	Debian DLA-1268-1 : p7zip security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-17969

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high