13 matches found
EUVD-2019-7912
Malware in sbrugna...
EUVD-2012-1193
Malware in sbrugna...
EUVD-2017-4393
Malware in sbrugna...
EUVD-2017-5619
Malware in sbrugna...
EUVD-2012-1192
Malware in sbrugna...
Ubuntu 16.04 ESM / 18.04 ESM : libzip vulnerability (USN-4811-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4811-1 advisory. It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service...
PT-2023-35773 · Git +1 · Libzip
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...
USN-4811-1 libzip vulnerability
It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service...
CVE-2017-14107
The zipreadeocd64 function in zipopen.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service memory allocation failure in zipcdirgrow in zipdirent.c via a crafted ZIP archive...
CVE-2017-14107
CVE-2017-14107 affects libzip’s zip_open.c _zip_read_eocd64 logic prior to version 1.3.0. A crafted ZIP archive can trigger a denial of service via memory allocation failure in _zip_cdir_grow in zip_dirent.c. Several connected sources confirm this issue and indicate the fix is to upgrade to libzi...
CVE-2012-1163
Integer overflow in the zipreadcdir function in zipopen.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an...
CVE-2012-1162
Heap-based buffer overflow in the zipreadcdir function in zipopen.c in libzip 0.10 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."...
libzip library / PHP DoS
NULL pointer dereference in zipnamelocate...