Lucene search

K
freebsdFreeBSD264749AE-D565-11E4-B545-00269EE29E57
HistoryMar 18, 2015 - 12:00 a.m.

libzip -- integer overflow

2015-03-1800:00:00
vuxml.freebsd.org
41

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.953 High

EPSS

Percentile

99.3%

libzip developers report:

Avoid integer overflow. Fixed similarly to patch used in PHP copy of libzip.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.953 High

EPSS

Percentile

99.3%