Search CVE reports


Toggle filters

1 – 10 of 31 results


CVE-2024-39134

Medium priority
Needs evaluation

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.

1 affected packages

zziplib

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
zziplib Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-39133

Medium priority
Needs evaluation

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

1 affected packages

zziplib

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
zziplib Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2020-18770

Medium priority
Needs evaluation

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

1 affected packages

zziplib

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
zziplib Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-26130

Medium priority
Vulnerable

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to...

1 affected packages

cpp-httplib

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
cpp-httplib Needs evaluation Vulnerable Not in release Not in release Not in release
Show less packages

CVE-2021-38714

Medium priority

Some fixes available 3 of 6

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.

1 affected packages

plib

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
plib Not affected Not affected Fixed Fixed Fixed
Show less packages

CVE-2020-18442

Low priority

Some fixes available 3 of 7

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

1 affected packages

zziplib

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
zziplib Not affected Fixed Fixed Fixed
Show less packages

CVE-2021-21240

Low priority
Vulnerable

httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service...

1 affected packages

python-httplib2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python-httplib2 Not affected Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2020-11078

Low priority
Vulnerable

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability...

1 affected packages

python-httplib2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python-httplib2 Not affected Not affected Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2018-17828

Negligible priority
Vulnerable

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.

1 affected packages

zziplib

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
zziplib Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2018-16548

Low priority
Vulnerable

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.

1 affected packages

zziplib

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
zziplib Not affected Not affected Not affected Vulnerable Vulnerable
Show less packages