CVE-2017-9928: In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows...

Security readout for executives and security teams

CVE-2017-9928 is a flaw in lrzip 0.631 where a specially crafted archive can crash the program. The known impact in the provided sources is denial of service, not data theft or remote system takeover. Urgency depends on whether lrzip processes files from untrusted users, email, uploads, or automated archive pipelines. Exposure is likely limited to systems with lrzip 0.631 or affected distribution packages installed, especially where lrzip processes untrusted archives. General servers without lrzip, or systems only handling trusted files, have lower practical exposure based on the provided evidence. Prioritize patching where lrzip handles external or user-supplied archives. For ordinary endpoints or servers where lrzip is absent, urgency is lower. Because the documented impact is denial of service, this is not an emergency unless it affects critical automation or exposed file-processing services. Mitigation focus: Inventory systems with lrzip installed and identify package versions.; Apply lrzip updates from your Linux distribution or vendor advisory.; Avoid processing untrusted lrzip archives until patched or isolated..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.