Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2018-6540

zziplib: bus error in zzip_disk_findfirst function in zzip/mmapped.c

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Gdraheim
Products
Ubuntu Linux Zziplib
CVE-2017-5974

zziplib: heap-based buffer overflow in __zzip_get32 (fetch.c)

Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Gdraheim
Products
Debian Linux Zziplib
CVE-2017-5975

zziplib: heap-based buffer overflow in __zzip_get64 (fetch.c)

Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.

CVSS 3.1 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Gdraheim
Products
Debian Linux Zziplib
CVE-2024-39134

zziplib: Stack buffer overflow via __zzip_fetch_disk_trailer() function at zzip/zip.c

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Gdraheim Zziplib
Products
Zziplib Zziplib