Lucene search
K

43 matches found

SUSE CVE
SUSE CVE
added 2026/05/05 1:45 a.m.4 views

SUSE CVE-2026-42484

A heap-based buffer overflow in hextobinary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and 17230. When datatypeenum=1,...

9.8CVSS6.4AI score0.00108EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-42484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow in hextobinary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute...

9.8CVSS6.4AI score0.00108EPSS
Exploits1References3
NVD
NVD
added 2026/05/01 2:16 p.m.2 views

CVE-2026-42484

A heap-based buffer overflow in hextobinary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and 17230. When datatypeenum=1,...

9.8CVSS0.00108EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2026/05/01 2:16 p.m.0 views

CVE-2026-42484

A heap-based buffer overflow in hextobinary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and 17230. When datatypeenum=1,...

9.8CVSS6.3AI score0.00108EPSS
Exploits1References2
OSV
OSV
added 2026/05/01 2:16 p.m.2 views

UBUNTU-CVE-2026-42484

A heap-based buffer overflow in hextobinary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and 17230. When datatypeenum=1,...

9.8CVSS6.4AI score0.00108EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.2 views

PT-2026-36353

Name of the Vulnerable Software and Affected Versions hashcat version 7.1.2 Description A heap-based buffer overflow exists in the hex to binary function within the PKZIP hash parser. This occurs when data type enum is less than or equal to 1, allowing attacker-controlled hex data from a...

9.8CVSS6.5AI score0.00108EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.5 views

hashcat 缓冲区错误漏洞

Hashcat is a high-performance password recovery and cracking tool developed by Hashcat developers. Version 7.1.2 of Hashcat contains a buffer overflow vulnerability. This vulnerability stems from the hextobinary function in the PKZIP hash parser, which has a heap-based buffer overflow. This occur...

9.8CVSS6.4AI score0.00108EPSS
Exploits1References1
EUVD
EUVD
added 2026/05/01 12:0 a.m.5 views

EUVD-2026-26531

A heap-based buffer overflow in hextobinary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and 17230. When datatypeenum=1,...

9.8CVSS6.4AI score0.00108EPSS
Exploits1References1
CVE
CVE
added 2026/05/01 12:0 a.m.12 views

CVE-2026-42484

Hashcat v7.1.2 contains a heap-based buffer overflow in the PKZIP hash parser’s hex_to_binary function. When data_type_enum

9.8CVSS6.4AI score0.00108EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2026/05/01 12:0 a.m.24 views

CVE-2026-42484

A heap-based buffer overflow in hextobinary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and 17230. When datatypeenum=1,...

0.00108EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/05/01 12:0 a.m.0 views

CVE-2026-42484

A heap-based buffer overflow in hextobinary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and 17230. When datatypeenum=1,...

6.4AI score0.00108EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-5233

Malware in sbrugna...

6.9CVSS6.4AI score0.00057EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2004-2268

Malware in sbrugna...

2.1CVSS6.4AI score0.001EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2001-1251

Malware in sbrugna...

2.1CVSS6.4AI score0.00144EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 2:41 a.m.5 views

CVE-2010-5274

Untrusted search path vulnerability in PKZIP before 12.50.0014 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .zip file. NOTE: some of these details are obtained from third party information...

6.9CVSS6.8AI score0.00057EPSS
Exploits0References1
Gentoo Linux
Gentoo Linux
added 2023/10/30 12:0 a.m.38 views

UnZip: Multiple Vulnerabilities

Background Info-ZIP’s UnZip is a tool to list and extract files inside PKZIP compressed files. Description Multiple vulnerabilities have been discovered in UnZip. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

5.5CVSS6.7AI score0.00242EPSS
Exploits2
Kitploit
Kitploit
added 2023/01/13 11:30 a.m.260 views

Bkcrack - Crack Legacy Zip Encryption With Biham And Kocher's Known Plaintext Attack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based Encryption Algorithm symmetric encryption algorithm referred ...

6.9AI score
Exploits0References2
Gentoo Linux
Gentoo Linux
added 2020/03/26 12:0 a.m.83 views

UnZip: User-assisted execution of arbitrary code

Background Info-ZIP’s UnZip is a tool to list and extract files inside PKZIP compressed files. Description Multiple vulnerabilities have been discovered in UnZip. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially craft...

7.8CVSS8AI score0.63564EPSS
Exploits2
Fedora
Fedora
added 2018/03/06 5:36 p.m.31 views

[SECURITY] Fedora 27 Update: unzip-6.0-37.fc27

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

7.8CVSS1.4AI score0.63564EPSS
Exploits2
Fedora
Fedora
added 2016/12/16 10:24 p.m.30 views

[SECURITY] Fedora 24 Update: unzip-6.0-31.fc24

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

4CVSS1.4AI score0.09788EPSS
Exploits0
Rows per page
Query Builder