Filtered by vendor Zziplib Project Subscriptions
Filtered by product Zziplib Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-17828 2 Redhat, Zziplib Project 2 Enterprise Linux, Zziplib 2024-11-21 N/A
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.
CVE-2018-16548 2 Redhat, Zziplib Project 2 Enterprise Linux, Zziplib 2024-11-21 N/A
An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.