FreeBSD Bugzilla – Attachment 191915 Details for
Bug 226491
[PATCH] devel/zziplib: update to 0.13.69 which fixes multiple CVEs
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
zziplib-vuln.xml
zziplib-vuln.xml (text/plain), 16.71 KB, created by
Kai Knoblich
on 2018-03-28 19:02:26 UTC
(
hide
)
Description:
zziplib-vuln.xml
Filename:
MIME Type:
Creator:
Kai Knoblich
Created:
2018-03-28 19:02:26 UTC
Size:
16.71 KB
patch
obsolete
>--- vuxml.orig/vuln.xml 2018-03-28 15:05:54.000000000 +0200 >+++ vuxml/vuln.xml 2018-03-28 20:51:28.314913000 +0200 >@@ -58,6 +58,431 @@ > * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) > --> > <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> >+ <vuln vid="baf4d251-32b8-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.68</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7727"> >+ <p>An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-7727</url> >+ </references> >+ <dates> >+ <discovery>2018-03-06</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="b8441bf4-32b6-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- There is a bus error caused in zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.68</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7726"> >+ <p>An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-7726</url> >+ </references> >+ <dates> >+ <discovery>2018-03-06</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="51829e20-32b6-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- An invalid memory address dereference was discovered that causes an application crash, which leads to denial of service.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.68</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7725"> >+ <p>An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-7725</url> >+ </references> >+ <dates> >+ <discovery>2018-03-06</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="e0a99f65-32b5-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- An uncontrolled memory allocation and a crash exist in zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.68</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6869"> >+ <p>In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6869</url> >+ </references> >+ <dates> >+ <discovery>2018-02-09</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="5646826a-32b5-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- A bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.67</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6542"> >+ <p>In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6542</url> >+ </references> >+ <dates> >+ <discovery>2018-02-02</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="4417909c-32b4-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- A bus error caused by loading of a misaligned address. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.67</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6541"> >+ <p>In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6541</url> >+ </references> >+ <dates> >+ <discovery>2018-02-02</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="69d3a6c9-32b3-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- A bus error caused by loading of a misaligned address could leverage remote attackers to cause a denial of service via a crafted zip file.</topic> >+ <affects> >+ <package> >+ <name>zziplip</name> >+ <range><eq>0.13.67</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6540"> >+ <p>In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6540</url> >+ </references> >+ <dates> >+ <discovery>2018-02-02</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="d1d70ef2-32b2-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- A memory alignment error and bus error could leverage remote attackers to cause a denial of service via a crafted zip file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.67</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6484"> >+ <p>In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6484</url> >+ </references> >+ <dates> >+ <discovery>2018-02-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="290f3d71-32b2-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- A segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c).</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.67</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6381"> >+ <p>In ZZIPlib 0.13.67, there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file->stored data.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6381</url> >+ </references> >+ <dates> >+ <discovery>2018-01-29</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="c5c347e5-32b1-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- seeko.c allows remote attackers to cause a denial of service via a crafted ZIP file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.62</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5981"> >+ <p>seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5981</url> >+ </references> >+ <dates> >+ <discovery>2017-03-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="3f1879b4-32b1-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- The zzip_mem_entry_new function allows remote attackers to cause a denial of service via a crafted ZIP file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.62</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5980"> >+ <p>The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5980</url> >+ </references> >+ <dates> >+ <discovery>2017-03-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="c1de6b40-32b0-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- The prescan_entry function allows remote attackers to cause a denial of service via a crafted ZIP file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.62</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5979"> >+ <p>The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5979</url> >+ </references> >+ <dates> >+ <discovery>2017-03-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="0f107f19-32b0-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- The zzip_mem_entry_new function allows remote attackers to cause a denial of service via a crafted ZIP file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.62</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5978"> >+ <p>The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5978</url> >+ </references> >+ <dates> >+ <discovery>2017-03-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="fb397f74-32ae-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- The zzip_mem_entry_extra_block function allows remote attackers to cause a denial of service via a crafted ZIP file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.62</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5977"> >+ <p>The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5977</url> >+ </references> >+ <dates> >+ <discovery>2017-03-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="69501175-32ae-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- Heap-based buffer overflow allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.62</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5976"> >+ <p>Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5976</url> >+ </references> >+ <dates> >+ <discovery>2017-03-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="161764b0-32ad-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- Heap-based buffer overflow allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.62</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5975"> >+ <p>Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5975</url> >+ </references> >+ <dates> >+ <discovery>2017-03-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ >+ <vuln vid="a66d6313-32a9-11e8-9018-000e0cd7b374"> >+ <topic>zziplib -- Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</topic> >+ <affects> >+ <package> >+ <name>zziplib</name> >+ <range><eq>0.13.62</eq></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Mitre reports:</p> >+ <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5974"> >+ <p>Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5974</url> >+ </references> >+ <dates> >+ <discovery>2017-03-01</discovery> >+ <entry>2018-03-28</entry> >+ </dates> >+ </vuln> >+ > <vuln vid="1ce95bc7-3278-11e8-b527-00012e582166"> > <topic>webkit2-gtk3 -- multiple vulnerabilities</topic> > <affects>
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Flags:
kai
:
maintainer-approval+
Actions:
View
Attachments on
bug 226491
:
191360
|
191362
|
191575
|
191915
|
194919
|
194920
|
194922
|
194926
|
194927
|
194977