{"id":"CVE-2023-52168","aliases":["DEBIAN-CVE-2023-52168","EUVD-2023-56841","GHSA-wgw3-5w65-2g45","OESA-2025-1748","SUSE-SU-2024:2475-1","SUSE-SU-2024:2625-1","UBUNTU-CVE-2023-52168","USN-7438-1"],"status":"published","title":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer...","description":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0034,"percentile":0.27672,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2024-07-03T00:00:00Z","modified":"2026-10-26T18:00:14Z","fixes":[{"ecosystem":"Debian:12","package":"7zip","fixed_in":["22.01+dfsg-8+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"7zip","fixed_in":["24.05+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"7zip","fixed_in":["24.05+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"p7zip","fixed_in":["16.02+really25.01+dfsg-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"p7zip","fixed_in":["16.02+transitional.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"7zip","fixed_in":["21.07+dfsg-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"7zip","fixed_in":["23.01+dfsg-11ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01+dfsg-8+deb12u1"}]}],"versions":["22.01+dfsg-8"]},{"source":"osv","ecosystem":"Debian:13","package":"7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.05+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.05+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02+really25.01+dfsg-0+deb12u1"}]}],"versions":["16.02+dfsg-8"]},{"source":"osv","ecosystem":"Debian:13","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02+transitional.1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-8.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-7.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-7.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-7.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-8.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-8.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-7.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.1-7.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"p7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.02-150200.14.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.07+dfsg-4ubuntu0.1~esm1"}]}],"versions":["21.03~beta+dfsg-6","21.04~beta+dfsg-1","21.06+dfsg-1","21.07+dfsg-1","21.07+dfsg-2","21.07+dfsg-3","21.07+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.01+dfsg-11ubuntu0.1~esm1"}]}],"versions":["23.01+dfsg-3","23.01+dfsg-7","23.01+dfsg-8","23.01+dfsg-11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.07+dfsg-4ubuntu0.1~esm1"}]}],"versions":["21.03~beta+dfsg-6","21.04~beta+dfsg-1","21.06+dfsg-1","21.07+dfsg-1","21.07+dfsg-2","21.07+dfsg-3","21.07+dfsg-4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"7zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.01+dfsg-11ubuntu0.1~esm1"}]}],"versions":["23.01+dfsg-3","23.01+dfsg-7","23.01+dfsg-8","23.01+dfsg-11"],"bundled":2}],"products":[{"vendor":"7-zip","product":"7zip"}],"references":[{"url":"https://sourceforge.net/p/sevenzip/bugs/2402/","tags":["x_transferred","web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/07/03/10","tags":["x_transferred","web","report"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/03/10","tags":["mailing-list","x_transferred","web"]},{"url":"https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/","tags":["x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20241122-0011/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52168","tags":["advisory"]},{"url":"https://sourceforge.net/p/sevenzip/bugs/2402"},{"url":"https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3"},{"url":"https://security.netapp.com/advisory/ntap-20241122-0011"},{"url":"https://github.com/advisories/GHSA-wgw3-5w65-2g45"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-52168","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1748","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52169","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242475-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227358","tags":["report"]},{"url":"https://bugzilla.suse.com/1227359","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52169","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242625-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-52168","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52168","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7438-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-52169","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-52168","description":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.","status":"published","published":"2024-07-03T00:00:00Z","modified":"2025-11-03T21:50:20.788Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:18.88314Z"}],"euvd":[{"id":"EUVD-2023-56841","description":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.","status":"published","published":"2024-07-03T00:00:00Z","modified":"2025-11-03T21:50:20Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:30.775561Z"}],"ghsa":[{"id":"GHSA-wgw3-5w65-2g45","title":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer...","description":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.","status":"published","published":"2024-07-03T18:48:28Z","modified":"2025-11-04T00:30:51Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:04:26.580532Z"}],"nvd":[{"id":"CVE-2023-52168","description":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.","status":"published","published":"2024-07-03T18:15:04.597Z","modified":"2026-06-17T06:42:13.147Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:09:17.205287Z"}],"osv":[{"id":"DEBIAN-CVE-2023-52168","description":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.","status":"published","published":"2024-07-03T18:15:04.597Z","modified":"2026-10-26T18:00:14.366711524Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"OESA-2025-1748","title":"p7zip security update","description":"7za for Linux system to archive file as 7z file format\r\n\r\nSecurity Fix(es):\n\nThe NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.(CVE-2023-52168)\n\nThe NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.(CVE-2023-52169)","status":"published","published":"2025-07-11T11:08:50Z","modified":"2026-08-18T01:18:52.497687297Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"UBUNTU-CVE-2023-52168","description":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.","status":"published","published":"2024-07-03T18:15:00Z","modified":"2026-02-04T03:32:22.9324Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"CVE-2023-52168","description":"The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.","status":"published","published":"2024-07-03T18:15:04Z","modified":"2026-04-10T05:06:28.040939Z","updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"SUSE-SU-2024:2475-1","title":"Security update for p7zip","description":"This update for p7zip fixes the following issues:\n\n- CVE-2023-52168: Fixed heap-based buffer overflow in the NTFS handler allows two bytes to be overwritten at multiple offsets (bsc#1227358)\n- CVE-2023-52169: Fixed out-of-bounds read in NTFS handler (bsc#1227359)\n","status":"published","published":"2024-07-12T22:09:00Z","modified":"2026-02-04T04:09:03.070149Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2625-1","title":"Security update for p7zip","description":"This update for p7zip fixes the following issues:\n\n- CVE-2023-52168: Fixed heap-based buffer overflow in the NTFS handler allows two bytes to be overwritten at multiple offsets (bsc#1227358)\n- CVE-2023-52169: Fixed out-of-bounds read in NTFS handler (bsc#1227359)\n","status":"published","published":"2024-07-30T07:06:50Z","modified":"2026-02-04T04:27:55.099836Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-7438-1","title":"7zip vulnerabilities","description":"\nIgor Pavlov discovered that 7-Zip had several memory-related issues.\nAn attacker could possibly use these issues to cause 7-Zip to crash,\nresulting in a denial of service, or execute arbitrary code.\n(CVE-2023-52168, CVE-2023-52169)\n","status":"published","published":"2025-04-15T18:23:02Z","modified":"2026-04-27T17:53:42.880965Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}