Search for packages
| purl | pkg:deb/debian/minizip@1.1-5~bpo70%2B1 |
| Next non-vulnerable version | 1.1-8+deb11u1 |
| Latest non-vulnerable version | 1.1-8+deb11u1 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4ehf-h533-xqb2
Aliases: CVE-2014-9485 |
Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive. |
Affected by 1 other vulnerability. |
|
VCID-mhka-nrx1-gfgc
Aliases: CVE-2023-45853 GHSA-mq29-j5xf-cjwr |
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-01T17:35:34.217969+00:00 | Debian Oval Importer | Affected by | VCID-mhka-nrx1-gfgc | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |
| 2025-08-01T12:50:52.389152+00:00 | Debian Oval Importer | Affected by | VCID-4ehf-h533-xqb2 | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |