Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2023-45853
HistoryOct 14, 2023 - 2:15 a.m.

CVE-2023-45853

2023-10-1402:15:09
Google
osv.dev
14
minizip
zlib
integer overflow

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

50.6%

JSON

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Related

ubuntucve 1
cbl_mariner 13
nessus 48
openvas 38
osv 5
debiancve 1
nvd 1
wolfi 1
alpinelinux 1
cgr 1
veracode 1
cvelist 1
github 2
gentoo 1
debian 1
vulnrichment 1
redhatcve 1
ibm 9
cve 1
cloudlinux 1
amazon 1
prion 1
redos 1
mageia 1
photon 3
rosalinux 1
redhat 1
qualysblog 1
oracle 1
ics 1
ubuntucve
ubuntucve
CVE-2023-45853
2023-10-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2
2023-10-31 17:14:33
CVE-2023-45853 affecting package boost for versions less than 1.76.0-4
2023-10-31 17:32:47
CVE-2023-45853 affecting package zlib for versions less than 1.3.1-1
2024-05-17 21:38:35
nessus
nessus
GLSA-202401-18 : zlib: Buffer Overflow
2024-01-15 00:00:00
EulerOS 2.0 SP5 : zlib (EulerOS-SA-2024-1170)
2024-02-08 00:00:00
Photon OS 5.0: Zlib PHSA-2023-5.0-0126
2024-07-23 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2024-1710)
2024-05-17 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2024-1025)
2024-01-05 00:00:00
Debian: Security Advisory (DLA-3670-1)
2023-11-29 00:00:00
osv
osv
minizip - security update
2023-11-28 00:00:00
CGA-jq67-276v-crw8
2024-06-06 12:26:07
Security update for zlib
2024-07-12 13:01:56
debiancve
debiancve
CVE-2023-45853
2023-10-14 02:15:09
nvd
nvd
CVE-2023-45853
2023-10-14 02:15:09
wolfi
wolfi
CVE-2023-45853 vulnerabilities
2024-09-30 03:53:08
alpinelinux
alpinelinux
CVE-2023-45853
2023-10-14 02:15:09
cgr
cgr
CVE-2023-45853 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Buffer Overflow
2023-10-24 02:58:39
cvelist
cvelist
CVE-2023-45853
2023-10-14 00:00:00
github
github
pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency
2023-10-14 03:31:16
Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib
2024-07-16 19:32:45
gentoo
gentoo
zlib: Buffer Overflow
2024-01-15 00:00:00
debian
debian
[SECURITY] [DLA 3670-1] minizip security update
2023-11-27 23:14:37
vulnrichment
vulnrichment
CVE-2023-45853
2023-10-14 00:00:00
redhatcve
redhatcve
CVE-2023-45853
2023-10-16 23:57:36
ibm
ibm
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in MiniZip (CVE-2023-45853)
2024-01-30 15:24:55
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a denial of service due to MiniZip (CVE-2023-45853)
2024-02-27 15:02:47
Security Bulletin: IBM® Db2® is affected by a vulnerability in the open source zlib library. (CVE-2023-45853)
2024-06-11 17:24:52
cve
cve
CVE-2023-45853
2023-10-14 02:15:09
cloudlinux
cloudlinux
zlib: Fix of CVE-2023-45853
2023-10-24 20:53:31
amazon
amazon
Medium: zlib
2023-10-30 23:59:00
prion
prion
Integer overflow
2023-10-14 02:15:00
redos
redos
ROS-20231020-01
2023-10-20 00:00:00
mageia
mageia
Updated zlib packages fix a security vulnerability
2023-11-09 15:55:51
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0674
2023-10-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0126
2023-10-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0497
2023-10-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2463
2024-08-06 09:33:45
redhat
redhat
(RHSA-2023:7626) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update
2023-12-07 13:53:17
qualysblog
qualysblog
Oracle Critical Patch Update, July 2024 Security Update Review
2024-07-17 14:34:50
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

50.6%

JSON
Related for OSV:CVE-2023-45853
ubuntucve1cbl_mariner13nessus48openvas38osv5debiancve1nvd1wolfi1alpinelinux1cgr1veracode1cvelist1github2gentoo1debian1vulnrichment1redhatcve1ibm9cve1cloudlinux1amazon1prion1redos1mageia1photon3rosalinux1redhat1qualysblog1oracle1ics1