654 matches found
NULL Pointer Dereference
Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted...
Design/Logic Flaw
The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...
Out-of-bounds Read
Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Out-of-bounds Read. The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file. Remediation There is no fixed version for zziplib. References - Blogs.gentoo.or...
CVE-2017-5977
The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...
CVE-2017-5981
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file...
CVE-2017-5980
The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
CVE-2017-5979
The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
CVE-2017-5981
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file...
PT-2017-16802 · Zziplib +3 · Zziplib +3
Name of the Vulnerable Software and Affected Versions: zziplib version 0.13.62 Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted ZIP file. This is due to a problem in the zzip mem entry new function in memdisk....
PT-2017-16803 · Zziplib +3 · Zziplib +3
Name of the Vulnerable Software and Affected Versions: zziplib version 0.13.62 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by providing a crafted ZIP file, which exploits the prescan entr...
UBUNTU-CVE-2017-5975
Heap-based buffer overflow in the zzipget64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
UBUNTU-CVE-2017-5981
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file...
CVE-2017-5979
The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
UBUNTU-CVE-2017-5980
The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
PT-2017-16798 · Zziplib +3 · Zziplib +3
Name of the Vulnerable Software and Affected Versions: zziplib versions 0.13.56 through 0.13.62 Description: The issue is related to a heap-based buffer overflow in the zzip get32 function, located in the fetch.c file of zziplib. This allows remote attackers to cause a denial of service, resultin...
PT-2017-16800 · Zziplib +3 · Zziplib +3
Name of the Vulnerable Software and Affected Versions: zziplib versions 0.13.56 through 0.13.62 Description: The issue is related to a heap-based buffer overflow in the zzip mem entry extra block function, which can be triggered by a crafted ZIP file, potentially causing a denial of service crash...
zziplib - multiple vulnerabilities
NIST reports by search in the range 2017/01/01 - 2018/07/06: 17 security fixes in this release: Heap-based buffer overflow in the zzipget32 function in fetch.c. Heap-based buffer overflow in the zzipget64 function in fetch.c. Heap-based buffer overflow in the zzipmementryextrablock function in...
UBUNTU-CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...