CVE-2026-117556

A flaw was found in zchunk. This vulnerability allows a remote attacker to cause a Denial of Service DoS by tricking an application into processing a specially crafted file. Improper boundary checking during file header parsing causes the program to read beyond the allocated memory buffer, leadin...

CVE-2026-117556 affecting package zchunk for versions less than 1.5.5-1

CVE-2026-117556 affecting package zchunk for versions less than 1.5.5-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 45 Update: zchunk-1.5.5-1.fc45

zchunk is a compressed file format that splits the file into independent chunks. This allows you to only download the differences when downloading a new version of the file, and also makes zchunk files efficient over rsync. zchunk files are protected with strong checksums to verify that the file...

Fedora 45 : zchunk (2026-edde89c556)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-edde89c556 advisory. Update to 1.5.5, fixing a number of bugs around memory usage and correctness Tenable has extracted the preceding description block directly from the Fedora...

CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

SUSE CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

Linux Distros Unpatched Vulnerability : CVE-2026-117556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining...

zchunk: zchunk: Denial of Service via malformed file header

A flaw was found in zchunk. This vulnerability allows a remote attacker to cause a Denial of Service DoS by tricking an application into processing a specially crafted file. Improper boundary checking during file header parsing causes the program to read beyond the allocated memory buffer, leadin...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: zchunk: zchunk-1.5.5-1.hum1 aarch64, s390x, x8664 zchunk-devel-1.5.5-1.hum1 aarch64, s390x, x8664 zchunk-libs-1.5.5-1.hum1 aarch64, s390x, x8664 zchunk-1.5.5-1.hum1.src src...

CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

AZL-111188 CVE-2026-117556 affecting package zchunk for versions less than 1.5.5-1

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

DEBIAN-CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

UBUNTU-CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

CVE-2026-117556 zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

EUVD-2026-110834

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

CVE-2026-117556

Versions of zchunk prior to 1.5.5 are vulnerable to a heap out-of-bounds read in the read_preface() function located in src/lib/header.c. The vulnerability occurs because the software passes the total header length instead of the remaining bytes to compint parsing functions. An attacker can provi...

CVE-2026-117556 zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...

CVE-2026-117556 zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in readpreface in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing read...