Buffer Overflow

🗓️ 24 Oct 2023 02:58:39Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

libz.so Buffer Overflow due to absence of length checks in zip.

Reporter	Title	Published	Views	Family All 235
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	6 May 202519:09	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Outside In Technology (OIT) Security Vulnerabilities - July 2024	5 Mar 202517:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is affected by a vulnerability in the open source zlib library. (CVE-2023-45853)	11 Jun 202417:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	25 Jan 202611:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	10 Jul 202407:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in MiniZip (CVE-2023-45853)	30 Jan 202415:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in DB2 JDBC driver shipped with IBM Tivoli Business Service Manager	5 Feb 202500:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM WebSphere Application Server traditional used by IBM Security Verify Governance have multiple vulnerabilities	10 Jul 202416:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Db2 affect Cloud Pak System	28 Oct 202416:03	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	25 Jun 202410:51	–	ibm

Vulners

Node

minizip_project minizipMatch1.1-8+b1debian

AND

debian debian_linuxMatch10

minizip_project minizipMatch1.2.13-r0cpp

AND

minizip_project minizipMatch1.2.11-r1cpp

AND

minizip_project minizipMatch1.2.13-r2cpp

AND

minizip_project minizipMatch1.2.13-r1cpp

AND

minizip_project minizipMatch1.2.11-r2cpp

AND

minizip_project minizipMatch1.2.12-r0cpp

AND

minizip_project minizipMatch1.3-r0cpp

AND

alpinelinux alpine_linuxMatchedge

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r4cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r2cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r5cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r2cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.3-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r3cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.3-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r2cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r1cpp

AND

alpinelinux alpine_linuxMatchedge

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r12cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220505-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20210510-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220601-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.14.2-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r3cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r6cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20200401-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220121-r3cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20200401-r3cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r9cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220121-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r7cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20200401-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r10cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220601-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r13cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220601-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r7cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20210510-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.14.1-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r10cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220304-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r6cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r4cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r9cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20200401-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r4cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r3cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r5cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.14.1-r3cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.2-r4cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220407-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220304-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220304-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.14.1-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r8cpp

AND

alpinelinux alpine_linuxMatchedge

minizip_project minizipMatch1.2.13-r0cpp

AND

alpinelinux alpine_linuxMatch3.18

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r2cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r8cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r6cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r0cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r4cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r3cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r1cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r7cpp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r5cpp

AND

alpinelinux alpine_linuxMatch3.18

minizip_project minizipMatch1.1-8+b1debian

AND

debian debian_linuxMatch12

minizip_project minizipMatch1.1-8+b1debian

AND

debian debian_linuxMatch11

libz.so libz.soRange1.1.4.debug–1.3cpp

zlib zlibRange1.2.7.30–1.2.8.8cpp

Source	Link
github	www.github.com/madler/zlib/commit/431e66398552effd82d5c0ea982a521821782ebd
github	www.github.com/madler/zlib/pull/843
bugzilla	www.bugzilla.suse.com/show_bug.cgi
lists	www.lists.debian.org/debian-lts-announce/2023/11/msg00026.html
security	www.security.gentoo.org/glsa/202401-18
chromium	www.chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356
chromium	www.chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61
github	www.github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib
pypi	www.pypi.org/project/pyminizip/
security	www.security.netapp.com/advisory/ntap-20231130-0009/

20 Dec 2024 20:03Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.8

EPSS0.01396

SSVC