12569 matches found
Heap overflow
An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files...
CVE-2018-1056
An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files...
CVE-2018-1056
The CVE-2018-1056 entry concerns advancecomp prior to 2.1-2018/02, where an out-of-bounds heap buffer read in advzip’s ZIP processing could crash the advzip utility via crafted ZIP files. Affected software includes advancecomp and its components (e.g., advzip, advpng) across multiple distribution...
CVE-2018-1056
An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files...
37fis (>=1.0.0, <=1.0.2), @alohahealth/aloha-react-sdk (>=0.1.5, <=0.1.9) +1328 more potentially affected by CVE-2018-1002204 via adm-zip (>=0.1.4, <=0.4.10)
adm-zip NPM version =0.1.4, =1.0.0, =0.1.5, =0.1.0, =0.7.0, =0.5.9, =1.10.1, =1.0.1, =0.1.28, =0.0.5, =2.5.1, =2.6.1 - @cr4zyc4t/phantom-html2pdf 1.0.3 - @cypress/core-example 0.3.1 and more Source cves: CVE-2018-1002204 Source advisory: OSV:GHSA-3V6H-HQM4-2RG6...
GHSA-3V6H-HQM4-2RG6 Arbitrary File Write in adm-zip
Versions of adm-zip before 0.4.9 are vulnerable to arbitrary file write when used to extract a specifically crafted archive that contains path traversal filenames ../../file.txt for example. Recommendation Update to version 0.4.9 or later...
Arbitrary File Write in adm-zip
Versions of adm-zip before 0.4.9 are vulnerable to arbitrary file write when used to extract a specifically crafted archive that contains path traversal filenames ../../file.txt for example. Recommendation Update to version 0.4.9 or later...
CVE-2018-10862
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability...
CVE-2018-10862
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability...
Security feature bypass
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability...
CVE-2018-10862
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability...
CVE-2018-10862
WildFly Core before 6.0.0.Alpha3 is vulnerable due to insufficient validation of file paths in .war archives, enabling crafted archives to overwrite arbitrary files (Zip Slip). The issue is confirmed by linked advisories (GHSA-W8R2-5J8X-X8J6) and Red Hat security notes referencing CVE-2018-10862....
Arbitrary File Write
wildfly-deployment-repository is vulnerable to the zip-slip vulnerability. The library does not validate the target path when extracting and deploying .war files, leading to arbitrary file writes outside of the intended target directory...
DEBIAN-CVE-2015-9261
huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
CVE-2015-9261
huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
Null pointer dereference
huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
CVE-2015-9261
huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
CVE-2015-9261
huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)
It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...
wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)
It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...