Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v36x-fh5g-gvf8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive through 3.3.3 allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo.

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive through 3.3.3 allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo.

EPSS

Процентиль: 42%
0.00196
Низкий

Дефекты

CWE-401

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 7 лет назад

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS3: 5.5
redhat
почти 7 лет назад

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS3: 5.5
nvd
почти 7 лет назад

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS3: 5.5
debian
почти 7 лет назад

A memory leak in archive_read_format_zip_cleanup in archive_read_suppo ...

EPSS

Процентиль: 42%
0.00196
Низкий

Дефекты

CWE-401