Логотип exploitDog
bind:"CVE-2023-45853"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2023-45853"

Количество 11

Количество 11

ubuntu логотип

CVE-2023-45853

больше 1 года назад

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2023-45853

больше 1 года назад

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2023-45853

больше 1 года назад

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

CVSS3: 9.8
EPSS: Низкий
msrc логотип

CVE-2023-45853

больше 1 года назад

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2023-45853

больше 1 года назад

MiniZip in zlib through 1.3 has an integer overflow and resultant heap ...

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4217-1

больше 1 года назад

Security update for zlib

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4216-1

больше 1 года назад

Security update for zlib

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4215-1

больше 1 года назад

Security update for zlib

EPSS: Низкий
redos логотип

ROS-20231020-01

больше 1 года назад

Уязвимость zlib

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-mq29-j5xf-cjwr

больше 1 года назад

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

CVSS3: 9.8
EPSS: Низкий
fstec логотип

BDU:2023-07116

почти 2 года назад

Уязвимость функции zipOpenNewFileInZip4_64() пакета MiniZip библиотеки zlib, позволяющая нарушителю оказать воздействие на целостность, доступность и конфиденциальность защищаемой информации

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-45853

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

CVSS3: 9.8
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2023-45853

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

CVSS3: 5.3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2023-45853

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

CVSS3: 9.8
0%
Низкий
больше 1 года назад
msrc логотип
CVSS3: 9.8
0%
Низкий
больше 1 года назад
debian логотип
CVE-2023-45853

MiniZip in zlib through 1.3 has an integer overflow and resultant heap ...

CVSS3: 9.8
0%
Низкий
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:4217-1

Security update for zlib

0%
Низкий
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:4216-1

Security update for zlib

0%
Низкий
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:4215-1

Security update for zlib

0%
Низкий
больше 1 года назад
redos логотип
ROS-20231020-01

Уязвимость zlib

CVSS3: 9.8
0%
Низкий
больше 1 года назад
github логотип
GHSA-mq29-j5xf-cjwr

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

CVSS3: 9.8
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2023-07116

Уязвимость функции zipOpenNewFileInZip4_64() пакета MiniZip библиотеки zlib, позволяющая нарушителю оказать воздействие на целостность, доступность и конфиденциальность защищаемой информации

CVSS3: 9.8
0%
Низкий
почти 2 года назад

Уязвимостей на страницу