Lucene search
K

12 matches found

OSV
OSV
added 2024/06/27 8:15 p.m.1 views

AZL-43591 CVE-2024-39133 affecting package zziplib 0.13.72-3

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c...

4.3CVSS6.1AI score0.00298EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2024/06/27 8:15 p.m.15 views

CVE-2024-39133

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c...

4.3CVSS6.9AI score0.00298EPSS
Exploits1
OSV
OSV
added 2024/06/27 8:15 p.m.1 views

DEBIAN-CVE-2024-39133

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c...

4.3CVSS5.6AI score0.00298EPSS
Exploits1References1
OSV
OSV
added 2024/06/27 8:15 p.m.10 views

CVE-2024-39133

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c...

4.3CVSS6.6AI score
Exploits0References1
OSV
OSV
added 2024/06/27 8:15 p.m.0 views

UBUNTU-CVE-2024-39133

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c...

4.3CVSS5.8AI score0.00298EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/06/27 12:0 a.m.1 views

ZZIPlib security vulnerability

ZZIPlib is a compressed document extraction library. A security vulnerability exists in ZZIPlib version v0.13.77, which stems from a service resolution vulnerability in the zzipparserootdirectory function of the /zzip/zip.c file...

4.3CVSS6.8AI score0.00298EPSS
Exploits1References3
Veracode
Veracode
added 2023/10/24 2:58 a.m.30 views

Buffer Overflow

libz.so is vulnerable to Buffer Overflow. The vulnerability is present due to the absence of length checks in the filename, extrafield, and comment parameters within the zip.c. This oversight enables an attacker to trigger an integer overflow, leading to a heap-based buffer overflow in the...

9.8CVSS7.5AI score0.01396EPSS
Exploits0References13Affected Software5
SUSE CVE
SUSE CVE
added 2023/02/15 4:24 a.m.1 views

SUSE CVE-2018-16548

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function zzipparserootdirectory in zip.c, which will lead to a denial of service attack...

3.3CVSS6.8AI score0.00382EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2018/12/10 12:0 a.m.55 views

EulerOS 2.0 SP3 : zziplib (EulerOS-SA-2018-1397)

According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zziplib: out of bound read in mmapped.c:zzipdiskfread causes crash.CVE-2018-7725 - zziplib: Bus error in zip.c:zzipparserootdirectory cause cras...

6.5CVSS5.8AI score0.00498EPSS
Exploits3References4
NVD
NVD
added 2018/03/06 5:29 p.m.15 views

CVE-2018-7726

An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the zzipparserootdirectory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS5.5AI score0.00498EPSS
Exploits1References4
CNVD
CNVD
added 2018/02/08 12:0 a.m.1 views

ZZIPlib Denial of Service Vulnerability (CNVD-2018-05513)

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipfetchdisktrailer' function of the zzip/zip.c file in ZZIPlib version 0.13.67. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted zip file...

6.5CVSS6.8AI score0.00442EPSS
Exploits1References1
Cvelist
Cvelist
added 2016/09/17 9:0 p.m.31 views

CVE-2016-7414

The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressedfilesize field is large enough, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a crafted PHA...

9AI score0.01496EPSS
Exploits1References10
Rows per page
Query Builder