Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: OpenJDK: memory corruption issue on x8664 with AVX-512 8317121 CVE-2023-22025 OpenJDK: certificate path validation issue during client authentication...

PT-2023-35895 · Unknown · Net.Jsign.Appx

Name of the Vulnerable Software and Affected Versions: net.jsign.appx affected versions not specified Description: A security exception occurs due to a crash in the net.jsign.appx module. The crash happens when reading the Zip64EndOfCentralDirectoryRecord and CentralDirectory in the ZipFile class...

jsign:AuthenticodeAppxSignerFuzzer: Security exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read

Project: https://github.com/ebourg/jsign.git Detailed Report: https://oss-fuzz.com/testcase?key=6359562199105536 Project: jsign Fuzzing Engine: libFuzzer Fuzz Target: AuthenticodeAppxSignerFuzzer Job Type: libfuzzerasanjsign Platform Id: linux Crash Type: Security exception Crash Address: Crash...

openSUSE Security Update : nextcloud (openSUSE-2020-1652)

This update for nextcloud fixes the following issues : nextcloud version 20.0.0 fix some security issues : - NC-SA-2020-037 PIN for passwordless WebAuthm is asked for but not verified - NC-SA-2020-033 CVE-2020-8228 Missing rate limit on signup page - NC-SA-2020-029 CVE-2020-8233, boo1177346...

DEBIAN-CVE-2014-8141

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

Buffer Overflow

The unzip utility is vulnerable to buffer overflow. It is due to a flaw in the way unzip handled Zip64 files, allowing an attacker to send a malicious Zip archive to cause unzip to crash when the archive was uncompressed...

openSUSE Security Update : unzip (openSUSE-2019-509)

This update for unzip fixes the following issues : - CVE-2014-9636: Prevent denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression bsc914442 -...

Security update for unzip (moderate)

This update for unzip fixes the following security issues: - CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption bsc1013993 - CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to...

SUSE-SU-2018:2978-1 Security update for unzip

This update for unzip fixes the following security issues: - CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption bsc1013993 - CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to...

SUSE-SU-2018:1883-1 Security update for unzip

This update for unzip fixes the following issues: - CVE-2014-9636: Prevent denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression bsc914442 -...

CVE-2017-2158

Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive...

Input validation

Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive...

CVE-2017-2158

Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive...

CVE-2017-2158

CVE-2017-2158 affects Lhaplus (versions 1.73 and earlier) due to improper verification when expanding ZIP64 archives. A crafted ZIP64 archive can cause unintended contents to be extracted, indicating a potential information exposure risk. The issue is documented across multiple sources (NVD, JVN,...

PT-2018-7105

Name of the Vulnerable Software and Affected Versions: Lhaplus versions 1.73 and earlier Description: The issue arises from improper verification when expanding ZIP64 archives, potentially leading to the extraction of unintended contents from a specially crafted ZIP64 archive. Recommendations: Fo...

CVE-2017-2158: Improper Input Validation

Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive...

JVN#57842148: Lhaplus vulnerable to improper verification when expanding ZIP64 archives

Lhaplus is file compression/decompression software. Lhaplus does not treat ZIP64 archives properly when expanding. Impact An unintended content may be extracted from a crafted ZIP64 archive. Solution Update the Software Update to the latest version according to the information provided by the...

PHP 7.0.5 - ZipArchive::getFrom* Integer Overflow

Exploit for php platform in category remote exploits Details ======= An integer wrap may occur in PHP 7.x before version 7.0.6 when reading zip files with the getFromIndex and getFromName methods of ZipArchive, resulting in a heap overflow. php-7.0.5/ext/zip/phpzip.c ,---- | 2679 static void...

Amazon Linux AMI : unzip (ALAS-2015-504)

A buffer overflow was found in the way unzip uncompressed certain extra fields of a file. A specially crafted Zip archive could cause unzip to crash or, possibly, execute arbitrary code when the archive was tested with unzip's '-t' option. CVE-2014-9636 A buffer overflow flaw was found in the way...

Medium: unzip

Issue Overview: A buffer overflow was found in the way unzip uncompressed certain extra fields of a file. A specially crafted Zip archive could cause unzip to crash or, possibly, execute arbitrary code when the archive was tested with unzip's '-t' option. CVE-2014-9636 A buffer overflow flaw was...