Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2021-33451
CVE-2021-33451:
Linux Debian vulnerability analysis and mitigation
Overview
An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() function in stream.c (Debian Tracker, GitHub Issue).
Technical details
The vulnerability exists in the fill_buffer() function located in stream.c file at line 1538. When processing certain inputs, the function fails to properly free allocated memory, resulting in memory leaks of 24 bytes per allocation (GitHub Issue).
Impact
The vulnerability can lead to memory leaks in the system, potentially causing denial of service through resource exhaustion over time (Debian Tracker).
Exploitability
The vulnerability requires local access and can be triggered by processing specially crafted files. A proof of concept exploit has been publicly disclosed (GitHub Issue).
Mitigation and workarounds
The issue affects lrzip version 0.641 and has been reported as unimportant from a security perspective. While the vulnerability remains unfixed in several Debian releases (bullseye, bookworm, sid, trixie), it is considered a memleak in CLI tool with no significant security impact (Debian Tracker).
Additional resources
Source: This report was generated using AI
Related Linux Debian vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management