[SECURITY] [DLA 994-1] zziplib security update

Package : zziplib Version : 0.13.56-1.1+deb7u1 CVE ID : CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981 CVE-2017-5974 Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib allows remote attackers to cause a denial of service...

Debian DSA-3878-1 : zziplib - security update

Agostino Sarubbo discovered multiple vulnerabilities in zziplib, a library to access Zip archives, which could result in denial of service and potentially the execution of arbitrary code if a malformed archive is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2015-5980

...

CVE-2015-5980

CVE-2015-5980 entry is rejected/not used and does not represent an active vulnerability.

openSUSE Security Update : zziplib (openSUSE-2017-554)

This update for zziplib fixes the following issues : Secuirty issues fixed : - CVE-2017-5974: heap-based buffer overflow in zzipget32 fetch.c bsc1024517 - CVE-2017-5975: heap-based buffer overflow in zzipget64 fetch.c bsc1024528 - CVE-2017-5976: heap-based buffer overflow in zzipmementryextrabloc...

CVE-2017-5980

CVE-2017-5980 concerns zziplib 0.13.62, where the memdisk.c function zzip_mem_entry_new may dereference a NULL pointer when processing a crafted ZIP file, leading to a crash. The vulnerability is triggered by a malformed archive and is described across multiple advisories (e.g., Debian DLA-994-1,...

CVE-2017-5980

The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...

CVE-2016-5980

CVE-2016-5980 affects IBM TRIRIGA Application Platform. The IBM bulletin documents a Reflected Cross-Site Scripting (XSS) vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected version...

SuSE 10 Security Update : OpenSLP (ZYPP Patch Number 5980)

OpenSLP prior this update does not correctly check the return values of OpenSSL functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41569;...

CVE-2008-5980

CVE-2008-5980 affects Ocean12 Mailing List Manager Gold, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download a database (o12mail.mdb) via a direct request. The provided sources corroborate that the issue is a data exposure d...

CVE-2008-5980

creationtimestamp| type| source ---|---|--- 2008-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7319...

CVE-2006-5980

The CVE-2006-5980 entry concerns adm_lgn_admin.asp in Renasoft NetJetServer 2.5.3.939 (and possibly earlier) with a flaw where login authentication is not performed properly, enabling remote attackers to obtain administrative privileges. The vulnerability is documented across multiple sources (NV...