The vulnerability of the zipOpenNewFileInZip4_64() function in the MiniZip package from the zlib library allows a attacker to compromise the integrity, accessibility, and confidentiality of the protected information.

🗓️ 25 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Integer overflow in zipOpenNewFileInZip4_64() in MiniZip zlib may compromise integrity, accessibility, and confidentiality.

Reporter	Title	Published	Views	Family All 241
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	6 May 202519:09	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Outside In Technology (OIT) Security Vulnerabilities - July 2024	5 Mar 202517:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is affected by a vulnerability in the open source zlib library. (CVE-2023-45853)	11 Jun 202417:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	25 Jan 202611:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	10 Jul 202407:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in MiniZip (CVE-2023-45853)	30 Jan 202415:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Omnifind Text Search Server for DB2 for i is affected by multiple vulnerabilities[CVE-2017-12626,CVE-2023-44483,CVE-2023-45853,CVE-2024-8176,CVE-2024-11612,CVE-2024-50602,CVE-2025-27363,CVE-2025-29482,CVE-2025-48924,CVE-2025-53816]	20 Jun 202601:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in DB2 JDBC driver shipped with IBM Tivoli Business Service Manager	5 Feb 202500:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM WebSphere Application Server traditional used by IBM Security Verify Governance have multiple vulnerabilities	10 Jul 202416:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Db2 affect Cloud Pak System	28 Oct 202416:03	–	ibm

Vulners

Node

project_harbor harborMatch2.7.0aurora

Source	Link
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-zlib-cve-2023-45853/
access	www.access.redhat.com/security/cve/cve-2023-45853
openwall	www.openwall.com/lists/oss-security/2023/10/20/9
chromium	www.chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356
chromium	www.chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61
github	www.github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib
github	www.github.com/madler/zlib/pull/843
winimage	www.winimage.com/zLibDll/minizip.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
vuldb	www.vuldb.com/ru/

15 Apr 2026 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 39.8

CVSS 210

EPSS0.02918

zipOpenNewFileInZip4_64 integer overflow MiniZip package zlib library data integrity data accessibility data confidentiality