Vulnerability · Published Jul 3, 2024 · Assigned by mitre
CVE-2023-52169
High 8.2
In plain English
A high-severity out-of-bounds read in the 7zip package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | 7zip | 22.01+dfsg-8+deb12u1 | DEBIAN-CVE-2023-52169 |
| Debian:13 | 7zip | 24.05+dfsg-1 | DEBIAN-CVE-2023-52169 |
| Debian:14 | 7zip | 24.05+dfsg-1 | DEBIAN-CVE-2023-52169 |
| Debian:12 | p7zip | 16.02+really25.01+dfsg-0+deb12u1 | DEBIAN-CVE-2023-52169 |
| Debian:13 | p7zip | 16.02+transitional.1 | DEBIAN-CVE-2023-52169 |
Affected products (as reported)
Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
References
- https://sourceforge.net/p/sevenzip/bugs/2402/
- https://www.openwall.com/lists/oss-security/2024/07/03/10
- [oss-security] 20240703 CVE-2023-52168, CVE-2023-52169: buffer overflow, over-read vulnerabilities in the 7-Zip archiver mailing-list
- https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/
- https://security.netapp.com/advisory/ntap-20241122-0011/