In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo function (lrzip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-5786.json"