CVE-2023-31102

HIGH EPSS 99.3%
Published Nov 3, 20232y ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Nov 3, 2023 2y ago
Last Modified Jun 17, 2026 2w ago

Description

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
99.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-191

Affected Products 4

VendorProductVersionRange
7-zip7-zip* <22.01
linuxlinux_kernel*any
netappactive_iq_unified_manager*any
netapponcommand_workflow_automation*any

References 5

  • ds-security.com https://ds-security.com/post/integer-overflow-in-7-zip-cve-2023-31102/
  • security.netapp.com https://security.netapp.com/advisory/ntap-20231110-0007/
    Third Party Advisory
  • sourceforge.net https://sourceforge.net/p/sevenzip/discussion/45797/thread/713c8a8269/
    Issue TrackingRelease Notes
  • 7-zip.org https://www.7-zip.org/download.html
    Product
  • zerodayinitiative.com https://www.zerodayinitiative.com/advisories/ZDI-23-1165/
    Third Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.