Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-45853
HistoryOct 14, 2023 - 2:15 a.m.

Integer overflow

2023-10-1402:15:00
PRIOn knowledge base
www.prio-n.com
7
integer overflow
heap-based buffer overflow
minizip
zlib
pyminizip

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

JSON

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

CPENameOperatorVersion
zlible1.3

Related

redhatcve 1
cloudlinux 1
nessus 44
openvas 38
cve 1
ibm 5
osv 3
amazon 1
cbl_mariner 11
mageia 1
redos 1
debian 1
veracode 1
alpinelinux 1
cgr 1
gentoo 1
cvelist 1
github 1
ubuntucve 1
nvd 1
debiancve 1
wolfi 1
photon 3
redhat 1
ics 1
redhatcve
redhatcve
CVE-2023-45853
2023-10-16 23:57:36
cloudlinux
cloudlinux
zlib: Fix of CVE-2023-45853
2023-10-24 20:53:31
nessus
nessus
EulerOS Virtualization 2.9.1 : zlib (EulerOS-SA-2024-1051)
2024-01-16 00:00:00
EulerOS Virtualization 2.9.0 : zlib (EulerOS-SA-2024-1025)
2024-01-16 00:00:00
EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2024-1424)
2024-03-21 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2024-1308)
2024-03-12 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2024-1051)
2024-01-05 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2024-1394)
2024-03-14 00:00:00
cve
cve
CVE-2023-45853
2023-10-14 02:15:09
ibm
ibm
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in MiniZip (CVE-2023-45853)
2024-01-30 15:30:07
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a denial of service due to MiniZip (CVE-2023-45853)
2024-02-27 15:02:47
Security Bulletin: IBM® Db2® is affected by a vulnerability in the open source zlib library. (CVE-2023-45853)
2024-06-11 17:24:52
osv
osv
pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency
2023-10-14 03:31:16
CVE-2023-45853
2023-10-14 02:15:09
minizip - security update
2023-11-28 00:00:00
amazon
amazon
Medium: zlib
2023-10-30 23:59:00
cbl_mariner
cbl_mariner
CVE-2023-45853 affecting package tcl for versions less than 8.6.13-3
2024-03-19 17:21:46
CVE-2023-45853 affecting package rust for versions less than 1.75.0-1
2024-03-19 17:21:46
CVE-2023-45853 affecting package keras for versions less than 3.1.1-1
2024-04-17 22:02:46
mageia
mageia
Updated zlib packages fix a security vulnerability
2023-11-09 15:55:51
redos
redos
ROS-20231020-01
2023-10-20 00:00:00
debian
debian
[SECURITY] [DLA 3670-1] minizip security update
2023-11-27 23:14:37
veracode
veracode
Buffer Overflow
2023-10-24 02:58:39
alpinelinux
alpinelinux
CVE-2023-45853
2023-10-14 02:15:09
cgr
cgr
CVE-2023-45853 vulnerabilities
2024-05-19 03:07:16
gentoo
gentoo
zlib: Buffer Overflow
2024-01-15 00:00:00
cvelist
cvelist
CVE-2023-45853
2023-10-14 00:00:00
github
github
pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency
2023-10-14 03:31:16
ubuntucve
ubuntucve
CVE-2023-45853
2023-10-14 00:00:00
nvd
nvd
CVE-2023-45853
2023-10-14 02:15:09
debiancve
debiancve
CVE-2023-45853
2023-10-14 02:15:09
wolfi
wolfi
CVE-2023-45853 vulnerabilities
2024-06-27 09:08:32
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0674
2023-10-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0126
2023-10-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0497
2023-10-25 00:00:00
redhat
redhat
(RHSA-2023:7626) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update
2023-12-07 13:53:17
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

JSON
Related for PRION:CVE-2023-45853
redhatcve1cloudlinux1nessus44openvas38cve1ibm5osv3amazon1cbl_mariner11mageia1redos1debian1veracode1alpinelinux1cgr1gentoo1cvelist1github1ubuntucve1nvd1debiancve1wolfi1photon3redhat1ics1