zziplib project zziplib 0.13.67 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.

Zziplib Project Zziplib 0.13.67

4.3

CVSSv2

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

Zziplib Project Zziplib 0.13.67 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.10 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04

4.3

CVSSv2

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

Zziplib Project Zziplib 0.13.67 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 17.10

4.3

CVSSv2

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

Zziplib Project Zziplib 0.13.67 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.10 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04

4.3

CVSSv2

In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated again...

Zziplib Project Zziplib 0.13.67 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.10 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04

4.3

CVSSv2

An issue exists in ZZIPlib up to and including 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.

Zziplib Project Zziplib

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook