Attachment 194920 Details for Bug 226491 – zziplib-vuln-rev2.xml

zziplib-vuln-rev2.xml

zziplib-vuln-rev2.xml (text/plain), 16.73 KB, created by Kai Knoblich on 2018-07-06 17:41:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Kai Knoblich

Created: 2018-07-06 17:41:12 UTC

Size: 16.73 KB

patch

obsolete

>Index: vuln.xml
>===================================================================
>--- vuln.xml	(revision 474018)
>+++ vuln.xml	(working copy)
>@@ -58,6 +58,431 @@
> * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="baf4d251-32b8-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.68</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7727">
>+	 An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-7727</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-03-06</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="b8441bf4-32b6-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- There is a bus error caused in zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.68</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7726">
>+	 An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-7726</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-03-06</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="51829e20-32b6-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- An invalid memory address dereference was discovered that causes an application crash, which leads to denial of service.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.68</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7725">
>+	 An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-7725</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-03-06</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="e0a99f65-32b5-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- An uncontrolled memory allocation and a crash exist in zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.68</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6869">
>+	 In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6869</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-02-09</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="5646826a-32b5-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- A bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.67</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6542">
>+	 In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6542</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-02-02</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="4417909c-32b4-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- A bus error caused by loading of a misaligned address. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.67</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6541">
>+	 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6541</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-02-02</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="69d3a6c9-32b3-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- A bus error caused by loading of a misaligned address could leverage remote attackers to cause a denial of service via a crafted zip file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplip</name>
>+	<range><eq>0.13.67</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6540">
>+	 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6540</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-02-02</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="d1d70ef2-32b2-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- A memory alignment error and bus error could leverage remote attackers to cause a denial of service via a crafted zip file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.67</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6484">
>+	 In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6484</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-02-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="290f3d71-32b2-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- A segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c).</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.67</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6381">
>+	 In ZZIPlib 0.13.67, there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file-&gt;stored data.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2018-6381</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-01-29</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="c5c347e5-32b1-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- seeko.c allows remote attackers to cause a denial of service via a crafted ZIP file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.62</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5981">
>+	 seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5981</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-03-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="3f1879b4-32b1-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- The zzip_mem_entry_new function allows remote attackers to cause a denial of service via a crafted ZIP file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.62</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5980">
>+	 The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5980</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-03-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="c1de6b40-32b0-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- The prescan_entry function allows remote attackers to cause a denial of service via a crafted ZIP file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.62</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5979">
>+	 The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5979</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-03-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="0f107f19-32b0-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- The zzip_mem_entry_new function allows remote attackers to cause a denial of service via a crafted ZIP file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.62</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5978">
>+	 The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5978</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-03-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="fb397f74-32ae-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- The zzip_mem_entry_extra_block function allows remote attackers to cause a denial of service via a crafted ZIP file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.62</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5977">
>+	 The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5977</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-03-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="69501175-32ae-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- Heap-based buffer overflow allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.62</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5976">
>+	 Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5976</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-03-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="161764b0-32ad-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- Heap-based buffer overflow allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.62</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5975">
>+	 Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5975</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-03-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="a66d6313-32a9-11e8-9018-000e0cd7b374">
>+ <topic>zziplib -- Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</topic>
>+ <affects>
>+ <package>
>+	<name>zziplib</name>
>+	<range><eq>0.13.62</eq></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Mitre reports:
>+	<blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5974">
>+	 Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://nvd.nist.gov/vuln/detail/CVE-2017-5974</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-03-01</discovery>
>+ <entry>2018-03-28</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="e375ff3f-7fec-11e8-8088-28d244aee256">
> <topic>expat -- multiple vulnerabilities</topic>
> <affects>

Flags:

kai: maintainer-approval+

Actions: View

Attachments on bug 226491: 191360 | 191362 | 191575 | 191915 | 194919 | 194920 | 194922 | 194926 | 194927 | 194977