Search for packages
| purl | pkg:deb/debian/minizip@1.1-8 |
| Next non-vulnerable version | 1.1-8+deb11u1 |
| Latest non-vulnerable version | 1.1-8+deb11u1 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-mhka-nrx1-gfgc
Aliases: CVE-2023-45853 GHSA-mq29-j5xf-cjwr |
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4ehf-h533-xqb2 | Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive. |
CVE-2014-9485
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-01T17:35:34.227420+00:00 | Debian Oval Importer | Affected by | VCID-mhka-nrx1-gfgc | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |
| 2025-08-01T12:50:52.401527+00:00 | Debian Oval Importer | Fixing | VCID-4ehf-h533-xqb2 | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |