High severity7.5NVD Advisory· Published Jun 27, 2024· Updated Jun 17, 2026
CVE-2024-39134
CVE-2024-39134
Description
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- zziplibv/zziplibvdescription
- osv-coords7 versionspkg:rpm/opensuse/zziplib&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/zziplib&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/zziplib&distro=openSUSE%20Tumbleweedpkg:rpm/suse/zziplib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/zziplib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/zziplib&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/zziplib&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5
< 0.13.69-150000.3.20.1+ 6 more
- (no CPE)range: < 0.13.69-150000.3.20.1
- (no CPE)range: < 0.13.72-150600.4.3.1
- (no CPE)range: < 0.13.78-1.1
- (no CPE)range: < 0.13.69-150000.3.20.1
- (no CPE)range: < 0.13.72-150600.4.3.1
- (no CPE)range: < 0.13.67-10.39.1
- (no CPE)range: < 0.13.67-10.39.1
Patches
Vulnerability mechanics
References
1- github.com/gdraheim/zziplib/issues/165nvdExploitIssue TrackingPatchVendor Advisory
News mentions
0No linked articles in our index yet.