CVE-2024-39133

Опубликовано: 27 июн. 2024

Источник: redhat

CVSS3: 5.5

Описание

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

A heap buffer overflow vulnerability was found in zziplib. This flaw allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 10	zziplib	Not affected
Red Hat Enterprise Linux 7	zziplib	Will not fix
Red Hat Enterprise Linux 8	zziplib	Will not fix
Red Hat Enterprise Linux 9	zziplib	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-119

https://bugzilla.redhat.com/show_bug.cgi?id=2294657zziplib: Heap buffer overflow in the __zzip_parse_root_directory() function at /zzip/zip.c

5.5 Medium

CVSS3

Связанные уязвимости

CVE-2024-39133

CVSS3: 4.3

ubuntu

около 2 лет назад

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

CVE-2024-39133

CVSS3: 4.3

nvd

около 2 лет назад

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

CVE-2024-39133

CVSS3: 4.3

msrc

больше 1 года назад

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

CVE-2024-39133

CVSS3: 4.3

debian

около 2 лет назад

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attacker ...

GHSA-pmxx-f7h9-2q7w

CVSS3: 4.3

github

около 2 лет назад

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

5.5 Medium

CVSS3