Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

CVE-2017-5979

zziplib: NULL pointer dereference in prescan_entry (fseeko.c)

The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2020-18442

zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Gdraheim and 1 more
Products
Debian Linux Fedora Zziplib and 1 more
CVE-2017-5978

zziplib: out of bounds read in zzip_mem_entry_new (memdisk.c)

The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2024-39134

zziplib: Stack buffer overflow via __zzip_fetch_disk_trailer() function at zzip/zip.c

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Gdraheim Zziplib
Products
Zziplib Zziplib