Search for packages
| purl | pkg:deb/debian/minizip@1.1-5~bpo70%2B1 |
| Next non-vulnerable version | 1.1-8+deb11u1 |
| Latest non-vulnerable version | 1.1-8+deb11u1 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-jb78-nstn-ykfr
Aliases: CVE-2014-9485 |
Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive. |
Affected by 1 other vulnerability. |
|
VCID-v6pc-48dg-4kad
Aliases: CVE-2023-45853 GHSA-mq29-j5xf-cjwr |
Integer Overflow or Wraparound MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||