Browse CVEs

HIGH 7.5 CVE-2024-39134 A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function … Zziplib Patch available Fix from $1,9502024-06-27 MEDIUM 5.5 CVE-2020-18770 An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. Zziplib No fix yet Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2018-17828 Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the f… Zziplib Patch available Fix from $1,6002018-10-01 MEDIUM 6.5 CVE-2018-16548 An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will… Zziplib after 0.13.69 Fix from $1,6002018-09-05 MEDIUM 6.5 CVE-2018-6542 In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findf… Zziplib No fix yet Fix from $1,6002018-02-02 MEDIUM 5.5 CVE-2017-5977 The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and… Zziplib No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5978 The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) v… Zziplib No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5979 The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) v… Zziplib No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5980 The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and cr… Zziplib No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5981 seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file. Zziplib No fix yet Fix from $1,6002017-03-01