Approved changes feed: RSS · Atom

cpe:2.3:a:gdraheim:zziplib:0.13.67:*:*:*:*:*:*:*

part: a version: 0.13.67 update: *

VendorGdraheim (b728be81-301e-59ad-99e3-d3a908571635)
ProductZziplib (379efeaf-3295-5fb2-a9ff-aea87d1c4947)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/gdraheim/zziplib purl2cpe 2026-06-01 10:15:45.654996

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6542 vulnerable 2026-06-08 05:11:53.939208 Details available
In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
Published: 2018-02-02T09:00:00.000Z
Updated: 2024-08-05T06:10:10.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6541 vulnerable 2026-06-08 05:11:53.938804 Details available
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Published: 2018-02-02T09:00:00.000Z
Updated: 2024-08-05T06:10:10.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6540 vulnerable 2026-06-08 05:11:53.938214 Details available
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Published: 2018-02-02T09:00:00.000Z
Updated: 2024-08-05T06:10:10.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6484 vulnerable 2026-06-08 05:11:53.786768 Details available
In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Published: 2018-02-01T05:00:00.000Z
Updated: 2024-08-05T06:01:49.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6381 vulnerable 2026-06-08 05:11:53.672716 Details available
In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file->stored data.
Published: 2018-01-29T17:00:00.000Z
Updated: 2024-08-05T06:01:49.247Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.