Lucene search
+L

7 matches found

OSV
OSV
added 2025/11/21 6:19 p.m.8 views

RLSA-2025:20478 Moderate: zziplib security update

The zziplib is a lightweight library to easily extract data from zip files. Security Fixes: zziplib: directory traversal in unzzipcat in the bins/unzzipcat-mem.c CVE-2018-17828 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

5.5CVSS5.5AI score0.01538EPSS
Exploits1References2
NVD
NVD
added 2021/06/18 3:15 p.m.26 views

CVE-2020-18442

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzipfileread" in the function "unzzipcatfile"...

3.3CVSS0.00745EPSS
Exploits1References4
OSV
OSV
added 2021/06/18 3:15 p.m.16 views

UBUNTU-CVE-2020-18442

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzipfileread" in the function "unzzipcatfile"...

3.3CVSS6.4AI score0.00745EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/06/18 12:0 a.m.4 views

zziplib 安全漏洞

ZZIPlib is a compressed document extraction library. A security vulnerability exists in zziplib, which is caused by an infinite loop in zziplib v0.13.69. The vulnerability can be exploited to cause a denial of service via the return value "zzip file read" in the function "unzzip cat file"...

3.3CVSS5.8AI score0.00745EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2019/03/05 12:0 a.m.5 views

PT-2019-6224 · Zziplib +9 · Zziplib +9

Name of the Vulnerable Software and Affected Versions: zziplib version 0.13.69 Description: The issue is related to an infinite loop in the unzzip cat file function, which can be exploited by remote attackers to cause a denial of service. This is achieved via the return value of zzip file read. T...

6.5CVSS5.7AI score0.01954EPSS
Exploits5References71
OSV
OSV
added 2018/10/01 8:29 a.m.8 views

AZL-7014 CVE-2018-17828 affecting package zziplib for versions less than 0.13.69-8

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. dot dot in a zip file, because of the function unzzipcat in the bins/unzzipcat-mem.c file...

5.5CVSS6.4AI score0.01538EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2018/09/25 12:0 a.m.4 views

PT-2018-14208

Name of the Vulnerable Software and Affected Versions ZZIPlib version 0.13.69 Description The issue allows attackers to overwrite arbitrary files via a .. dot dot in a zip file. This is due to the unzzip cat function in the bins/unzzipcat-mem.c file. Recommendations For ZZIPlib version 0.13.69,...

6.5CVSS6.5AI score0.02262EPSS
Exploits15References75
Rows per page
Query Builder