Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:43951
HistoryOct 24, 2023 - 2:58 a.m.

Buffer Overflow

2023-10-2402:58:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
libz.so
buffer overflow
length checks
zip.c
integer overflow
heap-based
zipopennewfileinzip4_64
excessively long header values
software

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

50.6%

JSON

libz.so is vulnerable to Buffer Overflow. The vulnerability is present due to the absence of length checks in the filename, extra_field, and comment parameters within the zip.c. This oversight enables an attacker to trigger an integer overflow, leading to a heap-based buffer overflow in the zipOpenNewFileInZip4_64 function. This can occur when an attacker provides excessively long header values.

Related

ubuntucve 1
cbl_mariner 13
nessus 48
openvas 38
osv 6
debiancve 1
nvd 1
wolfi 1
ibm 9
redhatcve 1
vulnrichment 1
cloudlinux 1
cve 1
alpinelinux 1
cgr 1
cvelist 1
gentoo 1
github 2
debian 1
amazon 1
prion 1
redos 1
mageia 1
photon 3
rosalinux 1
redhat 1
qualysblog 1
oracle 1
ics 1
ubuntucve
ubuntucve
CVE-2023-45853
2023-10-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2
2023-10-31 17:14:33
CVE-2023-45853 affecting package boost for versions less than 1.76.0-4
2023-10-31 17:32:47
CVE-2023-45853 affecting package zlib for versions less than 1.3.1-1
2024-05-17 21:38:35
nessus
nessus
GLSA-202401-18 : zlib: Buffer Overflow
2024-01-15 00:00:00
EulerOS 2.0 SP5 : zlib (EulerOS-SA-2024-1170)
2024-02-08 00:00:00
Photon OS 5.0: Zlib PHSA-2023-5.0-0126
2024-07-23 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2024-1710)
2024-05-17 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2024-1025)
2024-01-05 00:00:00
Debian: Security Advisory (DLA-3670-1)
2023-11-29 00:00:00
osv
osv
minizip - security update
2023-11-28 00:00:00
Security update for zlib
2024-07-12 13:01:56
CGA-jq67-276v-crw8
2024-06-06 12:26:07
debiancve
debiancve
CVE-2023-45853
2023-10-14 02:15:09
nvd
nvd
CVE-2023-45853
2023-10-14 02:15:09
wolfi
wolfi
CVE-2023-45853 vulnerabilities
2024-09-28 03:12:04
ibm
ibm
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in MiniZip (CVE-2023-45853)
2024-01-30 15:24:55
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a denial of service due to MiniZip (CVE-2023-45853)
2024-02-27 15:02:47
Security Bulletin: IBM® Db2® is affected by a vulnerability in the open source zlib library. (CVE-2023-45853)
2024-06-11 17:24:52
redhatcve
redhatcve
CVE-2023-45853
2023-10-16 23:57:36
vulnrichment
vulnrichment
CVE-2023-45853
2023-10-14 00:00:00
cloudlinux
cloudlinux
zlib: Fix of CVE-2023-45853
2023-10-24 20:53:31
cve
cve
CVE-2023-45853
2023-10-14 02:15:09
alpinelinux
alpinelinux
CVE-2023-45853
2023-10-14 02:15:09
cgr
cgr
CVE-2023-45853 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2023-45853
2023-10-14 00:00:00
gentoo
gentoo
zlib: Buffer Overflow
2024-01-15 00:00:00
github
github
pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency
2023-10-14 03:31:16
Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib
2024-07-16 19:32:45
debian
debian
[SECURITY] [DLA 3670-1] minizip security update
2023-11-27 23:14:37
amazon
amazon
Medium: zlib
2023-10-30 23:59:00
prion
prion
Integer overflow
2023-10-14 02:15:00
redos
redos
ROS-20231020-01
2023-10-20 00:00:00
mageia
mageia
Updated zlib packages fix a security vulnerability
2023-11-09 15:55:51
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0674
2023-10-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0126
2023-10-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0497
2023-10-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2463
2024-08-06 09:33:45
redhat
redhat
(RHSA-2023:7626) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update
2023-12-07 13:53:17
qualysblog
qualysblog
Oracle Critical Patch Update, July 2024 Security Update Review
2024-07-17 14:34:50
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

50.6%

JSON
Related for VERACODE:43951
ubuntucve1cbl_mariner13nessus48openvas38osv6debiancve1nvd1wolfi1ibm9redhatcve1vulnrichment1cloudlinux1cve1alpinelinux1cgr1cvelist1gentoo1github2debian1amazon1prion1redos1mageia1photon3rosalinux1redhat1qualysblog1oracle1ics1