1839 matches found
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file. Remediation There is no fixed version for zziplib. References - Blogs.gentoo.or...
NULL Pointer Dereference
Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted...
Design/Logic Flaw
The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...
NULL Pointer Dereference
Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP...
CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2017-5975
CVE-2017-5975 is a heap-based buffer overflow in zziplib’s fetch.c (__zzip_get64) affecting versions up to 0.13.62 (and older 0.13.56–0.13.61). Exploitation via a crafted ZIP file can crash the affected process (denial of service); remote attackers may exploit this to crash the application. Multi...
CVE-2017-5978
CVE-2017-5978 affects zziplib 0.13.62; the zzip_mem_entry_new function in memdisk.c allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file. Upstream fixes exist in 0.13.67 and several distros patched to mitigate, e.g., Debian, Arch, Mageia.
CVE-2017-5977
The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...
CVE-2017-5980
CVE-2017-5980 concerns zziplib 0.13.62, where the memdisk.c function zzip_mem_entry_new may dereference a NULL pointer when processing a crafted ZIP file, leading to a crash. The vulnerability is triggered by a malformed archive and is described across multiple advisories (e.g., Debian DLA-994-1,...
CVE-2017-5978
The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted ZIP file...
CVE-2017-5977
The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...
CVE-2017-5977
The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...
CVE-2017-5979
The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
CVE-2017-5980
The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
CVE-2017-5979
CVE-2017-5979 affects zziplib up to 0.13.62, where the prescan_entry function in fseeko.c can be triggered by a crafted ZIP file to cause a NULL pointer dereference and crash (denial of service). Multiple advisories (Debian DSA 3878-1, DLA-994-1; Mageia MGASA-2017-0163; Arch ASA-201705-15) indica...
CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2017-5979
The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
CVE-2017-5976
Heap-based buffer overflow in the zzipmementryextrablock function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...