Search for packages
Package details: pkg:deb/debian/minizip@1.1-8
purl pkg:deb/debian/minizip@1.1-8
Next non-vulnerable version 1.1-8+deb11u1
Latest non-vulnerable version 1.1-8+deb11u1
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-t9z5-qvz6-aaam
Aliases:
CVE-2023-45853
GHSA-mq29-j5xf-cjwr
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.
1.1-8+deb11u1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-yc3p-j2zc-aaaa Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive. CVE-2014-9485

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T12:02:37.468883+00:00 Debian Oval Importer Affected by VCID-t9z5-qvz6-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T01:42:36.876334+00:00 Debian Importer Affected by VCID-t9z5-qvz6-aaam https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-08T05:11:21.843558+00:00 Debian Oval Importer Affected by VCID-t9z5-qvz6-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-04-12T22:58:33.164498+00:00 Debian Oval Importer Affected by VCID-t9z5-qvz6-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:53:30.499257+00:00 Debian Oval Importer Fixing VCID-yc3p-j2zc-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:53:29.812175+00:00 Debian Oval Importer Fixing VCID-yc3p-j2zc-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:42:18.670033+00:00 Debian Oval Importer Affected by VCID-t9z5-qvz6-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-04T04:27:24.498252+00:00 Debian Importer Affected by VCID-t9z5-qvz6-aaam https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-02-21T14:20:00.958306+00:00 Debian Importer Affected by VCID-t9z5-qvz6-aaam https://security-tracker.debian.org/tracker/data/json 35.1.0
2024-04-26T05:48:40.769080+00:00 Debian Importer Affected by VCID-t9z5-qvz6-aaam https://security-tracker.debian.org/tracker/data/json 34.0.0rc4