ZZIPlib Project ZZIPlib 0.13.67

CPE Details

ZZIPlib Project ZZIPlib 0.13.67
zziplib_project
zziplib
0.13.67
2019-06-11
11h54 +00:00
2019-06-11
11h54 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:zziplib_project:zziplib:0.13.67:*:*:*:*:*:*:*

Informations

Vendor

zziplib_project

Product

zziplib

Version

0.13.67

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-16548 2018-09-05 19h00 +00:00 An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.
6.5
Medium
CVE-2018-6540 2018-02-02 08h00 +00:00 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
6.5
Medium
CVE-2018-6541 2018-02-02 08h00 +00:00 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
6.5
Medium
CVE-2018-6542 2018-02-02 08h00 +00:00 In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
6.5
Medium
CVE-2018-6484 2018-02-01 04h00 +00:00 In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
6.5
Medium
CVE-2018-6381 2018-01-29 16h00 +00:00 In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file->stored data.
6.5
Medium