Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Zziplib HIGH 7.5
CVE-2024-39134

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function …

Patch available
Fix from $1,950 2024-06-27
Zziplib MEDIUM 5.5
CVE-2020-18770

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

No fix yet
Fix from $1,600 2023-08-22
Zziplib MEDIUM 5.5
CVE-2018-17828

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the f…

Patch available
Fix from $1,600 2018-10-01
Zziplib MEDIUM 6.5
CVE-2018-16548

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will…

Fix: after 0.13.69
Fix from $1,600 2018-09-05
Zziplib MEDIUM 6.5
CVE-2018-6542

In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findf…

No fix yet
Fix from $1,600 2018-02-02
Zziplib MEDIUM 5.5
CVE-2017-5977

The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and…

No fix yet
Fix from $1,600 2017-03-01
Zziplib MEDIUM 5.5
CVE-2017-5978

The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) v…

No fix yet
Fix from $1,600 2017-03-01
Zziplib MEDIUM 5.5
CVE-2017-5979

The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) v…

No fix yet
Fix from $1,600 2017-03-01
Zziplib MEDIUM 5.5
CVE-2017-5980

The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and cr…

No fix yet
Fix from $1,600 2017-03-01
Zziplib MEDIUM 5.5
CVE-2017-5981

seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.

No fix yet
Fix from $1,600 2017-03-01