CVE-2024-11477 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-11477 Interim 1 9 2025-10-05T00:26:10Z current 2024-11-22T00:30:37Z 2025-10-05T00:26:10Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-11477 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation of Zstandard decompression. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24346. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Manager Proxy 4.3 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed libQt5Pdf5-5.15.19-1.1 libQt5PdfWidgets5-5.15.19-1.1 libqt5-qtpdf-devel-5.15.19-1.1 libqt5-qtpdf-examples-5.15.19-1.1 libqt5-qtpdf-imports-5.15.19-1.1 libqt5-qtpdf-private-headers-devel-5.15.19-1.1 libqt5-qtwebengine-5.15.19-1.1 libqt5-qtwebengine-devel-5.15.19-1.1 libqt5-qtwebengine-examples-5.15.19-1.1 libqt5-qtwebengine-private-headers-devel-5.15.19-1.1 p7zip p7zip-doc p7zip-full libQt5Pdf5-5.15.19-1.1 as a component of openSUSE Tumbleweed libQt5PdfWidgets5-5.15.19-1.1 as a component of openSUSE Tumbleweed libqt5-qtpdf-devel-5.15.19-1.1 as a component of openSUSE Tumbleweed libqt5-qtpdf-examples-5.15.19-1.1 as a component of openSUSE Tumbleweed libqt5-qtpdf-imports-5.15.19-1.1 as a component of openSUSE Tumbleweed libqt5-qtpdf-private-headers-devel-5.15.19-1.1 as a component of openSUSE Tumbleweed libqt5-qtwebengine-5.15.19-1.1 as a component of openSUSE Tumbleweed libqt5-qtwebengine-devel-5.15.19-1.1 as a component of openSUSE Tumbleweed libqt5-qtwebengine-examples-5.15.19-1.1 as a component of openSUSE Tumbleweed libqt5-qtwebengine-private-headers-devel-5.15.19-1.1 as a component of openSUSE Tumbleweed p7zip as a component of SLES-LTSS-TERADATA 15 SP2 p7zip as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS p7zip-full as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS p7zip as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS p7zip-full as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS p7zip as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS p7zip-full as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS p7zip as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS p7zip-full as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS p7zip as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS p7zip-full as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS p7zip as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS p7zip-full as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS p7zip as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 p7zip-full as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 p7zip as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 p7zip-full as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 p7zip as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 p7zip-full as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 p7zip as a component of SUSE Linux Enterprise Server 12 SP2-LTSS p7zip as a component of SUSE Linux Enterprise Server 12 SP4-LTSS p7zip as a component of SUSE Linux Enterprise Server 12 SP5-LTSS p7zip as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security p7zip as a component of SUSE Linux Enterprise Server 15 SP1-LTSS p7zip as a component of SUSE Linux Enterprise Server 15 SP2-LTSS p7zip-full as a component of SUSE Linux Enterprise Server 15 SP2-LTSS p7zip as a component of SUSE Linux Enterprise Server 15 SP3-LTSS p7zip-full as a component of SUSE Linux Enterprise Server 15 SP3-LTSS p7zip as a component of SUSE Linux Enterprise Server 15 SP4-LTSS p7zip-full as a component of SUSE Linux Enterprise Server 15 SP4-LTSS p7zip as a component of SUSE Linux Enterprise Server 15 SP5-LTSS p7zip-full as a component of SUSE Linux Enterprise Server 15 SP5-LTSS p7zip as a component of SUSE Linux Enterprise Server 15-LTSS p7zip as a component of SUSE Linux Enterprise Server Teradata 12 SP3 p7zip as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS p7zip as a component of SUSE Linux Enterprise Server Teradata 15 SP4 p7zip as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 p7zip-full as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 p7zip as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 p7zip-full as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 p7zip as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 p7zip-full as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 p7zip as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 p7zip-full as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 p7zip as a component of SUSE Manager Proxy 4.3 p7zip-full as a component of SUSE Manager Proxy 4.3 p7zip as a component of SUSE Manager Proxy LTS 4.3 p7zip-full as a component of SUSE Manager Proxy LTS 4.3 p7zip as a component of SUSE Manager Retail Branch Server 4.3 p7zip-full as a component of SUSE Manager Retail Branch Server 4.3 p7zip as a component of SUSE Manager Retail Branch Server LTS 4.3 p7zip-full as a component of SUSE Manager Retail Branch Server LTS 4.3 p7zip as a component of SUSE Manager Server 4.3 p7zip-full as a component of SUSE Manager Server 4.3 p7zip as a component of SUSE Manager Server LTS 4.3 p7zip-full as a component of SUSE Manager Server LTS 4.3 p7zip as a component of openSUSE Leap 15.5 p7zip-doc as a component of openSUSE Leap 15.5 p7zip-full as a component of openSUSE Leap 15.5 p7zip as a component of openSUSE Leap 15.6 p7zip-doc as a component of openSUSE Leap 15.6 p7zip-full as a component of openSUSE Leap 15.6 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation of Zstandard decompression. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24346. CVE-2024-11477 openSUSE Tumbleweed:libQt5Pdf5-5.15.19-1.1 openSUSE Tumbleweed:libQt5PdfWidgets5-5.15.19-1.1 openSUSE Tumbleweed:libqt5-qtpdf-devel-5.15.19-1.1 openSUSE Tumbleweed:libqt5-qtpdf-examples-5.15.19-1.1 openSUSE Tumbleweed:libqt5-qtpdf-imports-5.15.19-1.1 openSUSE Tumbleweed:libqt5-qtpdf-private-headers-devel-5.15.19-1.1 openSUSE Tumbleweed:libqt5-qtwebengine-5.15.19-1.1 openSUSE Tumbleweed:libqt5-qtwebengine-devel-5.15.19-1.1 openSUSE Tumbleweed:libqt5-qtwebengine-examples-5.15.19-1.1 openSUSE Tumbleweed:libqt5-qtwebengine-private-headers-devel-5.15.19-1.1 SLES-LTSS-TERADATA 15 SP2:p7zip SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:p7zip SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:p7zip-full SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:p7zip SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:p7zip-full SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:p7zip SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:p7zip-full SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:p7zip SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:p7zip-full SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:p7zip SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:p7zip-full SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:p7zip SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:p7zip-full SUSE Linux Enterprise Module for Basesystem 15 SP5:p7zip SUSE Linux Enterprise Module for Basesystem 15 SP5:p7zip-full SUSE Linux Enterprise Module for Basesystem 15 SP6:p7zip SUSE Linux Enterprise Module for Basesystem 15 SP6:p7zip-full SUSE Linux Enterprise Module for Basesystem 15 SP7:p7zip SUSE Linux Enterprise Module for Basesystem 15 SP7:p7zip-full SUSE Linux Enterprise Server 12 SP2-LTSS:p7zip SUSE Linux Enterprise Server 12 SP4-LTSS:p7zip SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:p7zip SUSE Linux Enterprise Server 12 SP5-LTSS:p7zip SUSE Linux Enterprise Server 15 SP1-LTSS:p7zip SUSE Linux Enterprise Server 15 SP2-LTSS:p7zip SUSE Linux Enterprise Server 15 SP2-LTSS:p7zip-full SUSE Linux Enterprise Server 15 SP3-LTSS:p7zip SUSE Linux Enterprise Server 15 SP3-LTSS:p7zip-full SUSE Linux Enterprise Server 15 SP4-LTSS:p7zip SUSE Linux Enterprise Server 15 SP4-LTSS:p7zip-full SUSE Linux Enterprise Server 15 SP5-LTSS:p7zip SUSE Linux Enterprise Server 15 SP5-LTSS:p7zip-full SUSE Linux Enterprise Server 15-LTSS:p7zip SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:p7zip SUSE Linux Enterprise Server Teradata 12 SP3:p7zip SUSE Linux Enterprise Server Teradata 15 SP4:p7zip SUSE Linux Enterprise Server for SAP Applications 15 SP2:p7zip SUSE Linux Enterprise Server for SAP Applications 15 SP2:p7zip-full SUSE Linux Enterprise Server for SAP Applications 15 SP3:p7zip SUSE Linux Enterprise Server for SAP Applications 15 SP3:p7zip-full SUSE Linux Enterprise Server for SAP Applications 15 SP4:p7zip SUSE Linux Enterprise Server for SAP Applications 15 SP4:p7zip-full SUSE Linux Enterprise Server for SAP Applications 15 SP5:p7zip SUSE Linux Enterprise Server for SAP Applications 15 SP5:p7zip-full SUSE Manager Proxy 4.3:p7zip SUSE Manager Proxy 4.3:p7zip-full SUSE Manager Proxy LTS 4.3:p7zip SUSE Manager Proxy LTS 4.3:p7zip-full SUSE Manager Retail Branch Server 4.3:p7zip SUSE Manager Retail Branch Server 4.3:p7zip-full SUSE Manager Retail Branch Server LTS 4.3:p7zip SUSE Manager Retail Branch Server LTS 4.3:p7zip-full SUSE Manager Server 4.3:p7zip SUSE Manager Server 4.3:p7zip-full SUSE Manager Server LTS 4.3:p7zip SUSE Manager Server LTS 4.3:p7zip-full openSUSE Leap 15.5:p7zip openSUSE Leap 15.5:p7zip-doc openSUSE Leap 15.5:p7zip-full openSUSE Leap 15.6:p7zip openSUSE Leap 15.6:p7zip-doc openSUSE Leap 15.6:p7zip-full important 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H