Lucene search
K

7 matches found

Microsoft CVE
Microsoft CVE
added 2025/05/15 7:0 a.m.6 views

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.

...

7.5CVSS6.3AI score0.00604EPSS
Exploits1
OSV
OSV
added 2024/06/27 9:15 p.m.2 views

DEBIAN-CVE-2024-39134

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the zzipfetchdisktrailer function at /zzip/zip.c...

7.5CVSS6.2AI score0.00604EPSS
Exploits1References1
OSV
OSV
added 2024/06/27 9:15 p.m.8 views

AZL-43669 CVE-2024-39134 affecting package zziplib 0.13.72-3

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the zzipfetchdisktrailer function at /zzip/zip.c...

7.5CVSS5.8AI score0.00604EPSS
Exploits1References1
Snyk
Snyk
added 2024/06/27 8:41 p.m.2 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow through the zzipfetchdisktrailer function. An attacker can disrupt service and potentially execute arbitrary code by sending specially crafted inputs. Remediation Upgrade zziplib to version 0.13.78 or higher...

8.7CVSS6.7AI score0.00604EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.4 views

The vulnerability of the `__zzip_fetch_disk_trailer` function in the ZZIPlib compression library, which stems from insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of the zzipfetchdisktrailer function in the ZZIPlib compression library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures by using a specially created zip file...

6.5CVSS6.1AI score0.02305EPSS
Exploits1References7Affected Software4
RedHat Linux
RedHat Linux
added 2018/10/30 8:33 a.m.2 views

zziplib: Bus error in zip.c:__zzip_parse_root_directory() cause crash via crafted zip file

An improper input validation was found in function zzipfetchdisktrailer of ZZIPlib, up to 0.13.68, that could lead to a crash in zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS5.7AI score0.0175EPSS
Exploits1References4
OSV
OSV
added 2018/02/01 12:0 a.m.2 views

UBUNTU-CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.5AI score0.02285EPSS
Exploits1References3
Rows per page
Query Builder