rpm package
opensuse/zziplib&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/zziplib&distro=openSUSE%20Tumbleweed
Vulnerabilities (17)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-39134 | — | < 0.13.78-1.1 | 0.13.78-1.1 | Jun 27, 2024 | A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c. | ||
| CVE-2024-39133 | — | < 0.13.78-1.1 | 0.13.78-1.1 | Jun 27, 2024 | Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c. | ||
| CVE-2020-18770 | — | < 0.13.72-3.1 | 0.13.72-3.1 | Aug 22, 2023 | An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. | ||
| CVE-2018-17828 | Med | 5.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Oct 1, 2018 | Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file. | |
| CVE-2018-16548 | Med | 6.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Sep 5, 2018 | An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack. | |
| CVE-2018-7726 | Med | 6.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Mar 6, 2018 | An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. | |
| CVE-2018-7725 | Med | 6.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Mar 6, 2018 | An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service. | |
| CVE-2018-6542 | Med | 6.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Feb 2, 2018 | In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. | |
| CVE-2018-6540 | Med | 6.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Feb 2, 2018 | In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. | |
| CVE-2018-6484 | Med | 6.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Feb 1, 2018 | In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. | |
| CVE-2018-6381 | Med | 6.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Jan 29, 2018 | In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated again | |
| CVE-2017-5981 | Med | 5.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Mar 1, 2017 | seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file. | |
| CVE-2017-5979 | Med | 5.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Mar 1, 2017 | The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file. | |
| CVE-2017-5978 | Med | 5.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Mar 1, 2017 | The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file. | |
| CVE-2017-5976 | Med | 5.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Mar 1, 2017 | Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. | |
| CVE-2017-5975 | Med | 5.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Mar 1, 2017 | Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. | |
| CVE-2017-5974 | Med | 5.5 | < 0.13.72-1.4 | 0.13.72-1.4 | Mar 1, 2017 | Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. |
- CVE-2024-39134Jun 27, 2024affected < 0.13.78-1.1fixed 0.13.78-1.1
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.
- CVE-2024-39133Jun 27, 2024affected < 0.13.78-1.1fixed 0.13.78-1.1
Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.
- CVE-2020-18770Aug 22, 2023affected < 0.13.72-3.1fixed 0.13.72-3.1
An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated again
- affected < 0.13.72-1.4fixed 0.13.72-1.4
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
- affected < 0.13.72-1.4fixed 0.13.72-1.4
Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.