Alpine Linux Development TeamALPINE:CVE-2023-45853CVE-2023-45853
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
50.6%
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | minizip | < 1.3-r1 | UNKNOWN |
| Alpine | edge-community | noarch | qt5-qtwebengine | < 5.15.15-r4 | UNKNOWN |
| Alpine | edge-community | noarch | qt6-qtwebengine | < 6.6.0-r1 | UNKNOWN |
| Alpine | edge-main | noarch | zlib | < 0 | UNKNOWN |
| Alpine | 3.15-main | noarch | zlib | < 0 | UNKNOWN |
| Alpine | 3.16-main | noarch | zlib | < 0 | UNKNOWN |
| Alpine | 3.17-main | noarch | zlib | < 0 | UNKNOWN |
| Alpine | 3.18-community | noarch | minizip | < 1.2.13-r1 | UNKNOWN |
| Alpine | 3.18-community | noarch | qt5-qtwebengine | < 5.15.13-r9 | UNKNOWN |
| Alpine | 3.18-main | noarch | zlib | < 0 | UNKNOWN |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
50.6%