Lucene search
+L

1954 matches found

CNVD
CNVD
•added 2018/02/09 12:00 a.m.•12 views

ZZIPlib '__zzip_parse_root_directory' function denial of service vulnerability

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipparserootdirectory' function of the zzip/zip.c file in ZZIPlib version 0.13.68. A remote attacker can exploit this vulnerability to cause a denial of service uncontrolled memory allocation and cras...

6.5CVSS6.8AI score0.02801EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2018/02/09 12:00 a.m.•30 views

CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.5AI score0.02801EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/09 12:00 a.m.•0 views

CVE-2018-6869: Allocation of Resources Without Limits or Throttling

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.4AI score0.02801EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/02/08 12:00 a.m.•16 views

ZZIPlib Denial of Service Vulnerability

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipdiskfindfirst' function in the zzip/mmapped.c file in ZZIPlib version 0.13.67. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted zip file...

6.5CVSS6.7AI score0.02262EPSS
SaveExploits1References1
Veracode
Veracode
•added 2018/02/04 11:23 p.m.•20 views

Denial Of Service (DoS)

ZZIPlib is vulnerable to denial of service DoS attacks. It is possible that a zip file will cause a bus error due to the loading of a misaligned address in the zzipdiskfindfirst function...

6.5CVSS6AI score0.02262EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2018/02/02 9:29 a.m.•22 views

Design/Logic Flaw

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

4.3CVSS6AI score0.02262EPSS
SaveExploits1References4Affected Software2
OSV
OSV
•added 2018/02/02 9:29 a.m.•22 views

CVE-2018-6540

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.5AI score
SaveExploits0References3
OSV
OSV
•added 2018/02/02 9:29 a.m.•5 views

DEBIAN-CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.3AI score0.02262EPSS
SaveExploits1References1
Prion
Prion
•added 2018/02/02 9:29 a.m.•23 views

Design/Logic Flaw

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

4.3CVSS6.1AI score0.02262EPSS
SaveExploits1References3Affected Software2
NVD
NVD
•added 2018/02/02 9:29 a.m.•18 views

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS5.5AI score0.02262EPSS
SaveExploits1References4
NVD
NVD
•added 2018/02/02 9:29 a.m.•15 views

CVE-2018-6540

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS5.6AI score0.02262EPSS
SaveExploits1References3
OSV
OSV
•added 2018/02/02 9:29 a.m.•24 views

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.4AI score
SaveExploits0References4
CVE
CVE
•added 2018/02/02 9:00 a.m.•99 views

CVE-2018-6540

CVE-2018-6540 affects ZZIPlib up to version 0.13.67, where a bus error is caused by loading a misaligned address in zzip/mmapped.c (zzip_disk_findfirst). This can enable a remote attacker to trigger a denial of service via a crafted ZIP file. Related advisories/observations reference additional f...

6.5CVSS5.5AI score0.02262EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2018/02/02 9:00 a.m.•46 views

CVE-2018-6540

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS4.3AI score0.02262EPSS
SaveExploits1
Cvelist
Cvelist
•added 2018/02/02 9:00 a.m.•32 views

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

5.5AI score0.02262EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2018/02/02 9:00 a.m.•34 views

CVE-2018-6540

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

5.5AI score0.02262EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2018/02/02 9:00 a.m.•24 views

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS3.8AI score0.02262EPSS
SaveExploits1
CVE
CVE
•added 2018/02/02 9:00 a.m.•96 views

CVE-2018-6541

CVE-2018-6541 : In ZZIPlib 0.13.67, a bus error caused by loading a misaligned address in __zzip_fetch_disk_trailer (zzip/zip.c) can be triggered by a crafted zip file, enabling a remote DoS. Connected advisories confirm fixes across multiple distros (e.g., Debian, Fedora, CentOS, Amazon Linux 2)...

6.5CVSS5.4AI score0.02262EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2018/02/02 12:00 a.m.•23 views

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.5AI score0.02262EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/02 12:00 a.m.•1 views

CVE-2018-6540: Undefined Security Weakness

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.4AI score0.02262EPSS
SaveExploits1References1
Rows per page
Query Builder