CVE-2017-9929: In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allow...

Security readout for executives and security teams

CVE-2017-9929 is a crash risk in lrzip 0.631. A maliciously crafted compressed file can trigger a stack buffer overflow when lrzip reads file information, causing denial of service. Sources do not show confirmed active exploitation. Exposure is most likely where lrzip or lrunzip processes files from untrusted users, email attachments, uploads, malware sandboxes, or automated archive pipelines. General endpoints are lower risk unless users open crafted lrzip files. Treat this as a targeted availability issue. Prioritize systems that automatically unpack external files or support customer uploads, then update through normal vulnerability management. It is not currently evidenced as actively exploited. Mitigation focus: Identify lrzip installations and package versions across servers, endpoints, containers, and build images.; Apply relevant vendor security updates from your operating system or distribution.; Limit lrzip processing of untrusted files until patched or validated..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.