CVE-2024-39133

2024-06-2720:15:22

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-39133

unix

zziplib

buffer overflow

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

OSVersionArchitecturePackageVersionFilename
Debian12allzziplib<= 0.13.72+dfsg.1-1.1zziplib_0.13.72+dfsg.1-1.1_all.deb
Debian11allzziplib<= 0.13.62-3.3+deb11u1zziplib_0.13.62-3.3+deb11u1_all.deb
Debian10allzziplib<= 0.13.62-3.2+deb10u1zziplib_0.13.62-3.2+deb10u1_all.deb
Debian999allzziplib<= 0.13.72+dfsg.1-1.2zziplib_0.13.72+dfsg.1-1.2_all.deb
Debian13allzziplib<= 0.13.72+dfsg.1-1.2zziplib_0.13.72+dfsg.1-1.2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	zziplib	<= 0.13.72+dfsg.1-1.1	zziplib_0.13.72+dfsg.1-1.1_all.deb
Debian	11	all	zziplib	<= 0.13.62-3.3+deb11u1	zziplib_0.13.62-3.3+deb11u1_all.deb
Debian	10	all	zziplib	<= 0.13.62-3.2+deb10u1	zziplib_0.13.62-3.2+deb10u1_all.deb
Debian	999	all	zziplib	<= 0.13.72+dfsg.1-1.2	zziplib_0.13.72+dfsg.1-1.2_all.deb
Debian	13	all	zziplib	<= 0.13.72+dfsg.1-1.2	zziplib_0.13.72+dfsg.1-1.2_all.deb