PT-2019-13344 · Zipios+1 · Zipios+1

Mike Salvatore · Publicado 2019-07-15 · Atualizado 2022-06-02 · CVE-2019-13453

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Zipios versions prior to 0.1.7

Description The issue is related to the handling of certain malformed zip archives, which can cause the software to go into an infinite loop, resulting in a denial of service. This is associated with the readUint32() function in zipheadio.h and the Zipfile::Zipfile() function in zipfile.cpp.

Recommendations For versions prior to 0.1.7, update to version 0.1.7 or later to resolve the issue. As a temporary workaround, consider restricting the handling of malformed zip archives to minimize the risk of exploitation.

Correção

DoS

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

CVE-2019-13453

DLA-3030-1

MGASA-2019-0341

OPENSUSE-SU-2024:13562-1

USN-4055-1

USN-4057-1

Produtos afetados

Ubuntu

Zipios

Referências · 23

• https://github.com/Sigil-Ebook/flightcrew/issues/54 · Nota
• https://usn.ubuntu.com/4057-1 · Nota
• https://cve.org/CVERecord?id=CVE-2019-13453 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2019-0341 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2022/05/msg00041.html · Nota
• https://osv.dev/vulnerability/CVE-2019-13453 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-13453 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4057-1 · Aviso do Fabricante
• https://sourceforge.net/p/zipios/news/2019/07/version-017-cve- · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2019-13453 · Nota de Segurança
• https://osv.dev/vulnerability/USN-4055-1 · Aviso do Fabricante
• http://securityfocus.com/bid/109282 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=25282 · Nota
• https://ubuntu.com/security/CVE-2019-13241 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4055-1 · Aviso do Fabricante