Lucene search

K
ubuntucveUbuntu.comUB:CVE-2019-13453
HistoryJul 15, 2019 - 12:00 a.m.

CVE-2019-13453

2019-07-1500:00:00
ubuntu.com
ubuntu.com
6

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.006 Low

EPSS

Percentile

79.3%

Zipios before 0.1.7 does not properly handle certain malformed zip archives
and can go into an infinite loop, causing a denial of service. This is
related to zipheadio.h:readUint32() and zipfile.cpp:Zipfile::Zipfile().

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchflightcrew< 0.7.2+dfsg-10ubuntu0.1UNKNOWN
ubuntu18.10noarchflightcrew< 0.7.2+dfsg-12ubuntu0.1UNKNOWN
ubuntu19.04noarchflightcrew< 0.7.2+dfsg-13ubuntu0.19.04.1UNKNOWN
ubuntu16.04noarchflightcrew< 0.7.2+dfsg-6ubuntu0.1UNKNOWN
ubuntu18.04noarchzipios++< 0.1.5.9+cvs.2007.04.28-10ubuntu0.18.04.1UNKNOWN
ubuntu18.10noarchzipios++< 0.1.5.9+cvs.2007.04.28-10ubuntu0.18.10.1UNKNOWN
ubuntu19.04noarchzipios++< 0.1.5.9+cvs.2007.04.28-10ubuntu0.19.04.1UNKNOWN
ubuntu14.04noarchzipios++< 0.1.5.9+cvs.2007.04.28-5.1ubuntu0.14.04.1~esm1UNKNOWN
ubuntu16.04noarchzipios++< 0.1.5.9+cvs.2007.04.28-5.2ubuntu0.16.04.1UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.006 Low

EPSS

Percentile

79.3%