Integer Overflows

zchunk is vulnerable to Integer Overflows. An attacker could exploit this vulnerability by tricking a user into opening a malicious zchunk file. The file would contain specially crafted data that would cause the zchunk library to overflow an integer, which could lead to arbitrary code execution...

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c lib/comp/zstd/zstd.c lib/dl/multipart.c or lib/header.c.

...

SUSE CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

AZL-31617 CVE-2023-46228 affecting package zchunk for versions less than 1.1.16-3

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

DEBIAN-CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

UBUNTU-CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

Integer overflow

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

CVE-2023-46228

CVE-2023-46228 describes integer overflow vulnerabilities in zchunk before 1.3.2 triggered by malformed zchunk files in multiple components (lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, lib/header.c). Publicly disclosed references indicate affected packages across Linux distros (e.g...

CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

zchunk Input Validation Error Vulnerability

zchunk is a compressed file format from zchunk open source. A security vulnerability exists in zchunk that stems from multiple integer overflows in lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. The vulnerability is caused by the presence of an integer overflow in the...

CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

CVE-2023-46228

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c...

PT-2023-6561 · Zchunk +4 · Zchunk +4

Name of the Vulnerable Software and Affected Versions: zchunk versions prior to 1.3.2 Description: The issue is related to integer overflows in components such as lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. This can be exploited via malformed zchunk files,...

Fedora: Security Advisory for zchunk (FEDORA-2023-b41b7b1f37)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: zchunk-1.3.1-1.fc36

zchunk is a compressed file format that splits the file into independent chunks. This allows you to only download the differences when downloading a new version of the file, and also makes zchunk files efficient over rsync. zchunk files are protected with strong checksums to verify that the file...

Fedora 36 : zchunk (2023-b41b7b1f37)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b41b7b1f37 advisory. Fix several low severity security bugs. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...