4 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-22898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - workers/extractor.py in Pandora aka pandora-analysis/pandora 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive aka ZIP bomb...
UBUNTU-CVE-2023-22898
workers/extractor.py in Pandora aka pandora-analysis/pandora 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive aka ZIP bomb...
CVE-2023-22898
CVE-2023-22898 affects Pandora (pandora-analysis/pandora) 1.3.0. The vulnerability is in workers/extractor.py, where processing deeply nested ZIP archives (ZIP bombs) can cause a denial-of-service. The root cause is unbounded or inefficient handling of nested archives, enabling resource exhaustio...
