CVE-2023-52168

NameCVE-2023-52168
DescriptionThe NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
7zip (PTS)bookworm22.01+dfsg-8+deb12u1fixed
sid, trixie24.09+dfsg-2fixed
p7zip (PTS)jessie, jessie (lts)9.20.1~dfsg.1-4.1+deb8u3vulnerable
stretch (security), stretch (lts), stretch16.02+dfsg-3+deb9u1vulnerable
buster16.02+dfsg-6vulnerable
bullseye, bookworm16.02+dfsg-8vulnerable
sid, trixie16.02+transitional.1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
7zipsourcebookworm22.01+dfsg-8+deb12u1
7zipsource(unstable)24.05+dfsg-1
p7zipsource(unstable)16.02+transitional.1

Notes

[bookworm] - p7zip <no-dsa> (Minor issue)
[bullseye] - p7zip <postponed> (Minor issue, sourceforge but is not public)
https://sourceforge.net/p/sevenzip/bugs/2402/
https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/
https://www.openwall.com/lists/oss-security/2024/07/03/10
Since p7zip/16.02+transitional.1 src:p7zip is only a empty source package
depending on 7zip. Mark this version as fixed version.
[buster] - p7zip <postponed> (Minor issue, sourceforge but is not public)
[stretch] - p7zip <postponed> (Minor issue, sourceforge but is not public)
[jessie] - p7zip <postponed> (Minor issue, sourceforge but is not public)

Search for package or bug name: Reporting problems