Approved changes feed: RSS · Atom

cpe:2.3:a:zziplib_project:zziplib:0.13.67:*:*:*:*:*:*:*

part: a version: 0.13.67 update: *

VendorZziplib Project (7809e9d6-f560-5560-a013-7b55a2dd396b)
ProductZziplib (78c09667-85a6-5f64-9363-486aa83341fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:cpan/zziplib purl2cpe 2026-06-01 10:14:06.835276
pkg:deb/debian/zziplib purl2cpe 2026-06-01 10:14:06.835277
pkg:deb/ubuntu/zziplib purl2cpe 2026-06-01 10:14:06.835278
pkg:github/gdraheim/zziplib purl2cpe 2026-06-01 10:14:06.835280
pkg:rpm/centos/zziplib purl2cpe 2026-06-01 10:14:06.835281
pkg:rpm/fedora/zziplib purl2cpe 2026-06-01 10:14:06.835282
pkg:rpm/opensuse/zziplib purl2cpe 2026-06-01 10:14:06.835284
pkg:sourceforge/zziplib purl2cpe 2026-06-01 10:14:06.835285

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6542 vulnerable 2026-06-08 05:11:53.939186 Details available
In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
Published: 2018-02-02T09:00:00.000Z
Updated: 2024-08-05T06:10:10.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6541 vulnerable 2026-06-08 05:11:53.938592 Details available
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Published: 2018-02-02T09:00:00.000Z
Updated: 2024-08-05T06:10:10.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6540 vulnerable 2026-06-08 05:11:53.938105 Details available
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Published: 2018-02-02T09:00:00.000Z
Updated: 2024-08-05T06:10:10.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6484 vulnerable 2026-06-08 05:11:53.786557 Details available
In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Published: 2018-02-01T05:00:00.000Z
Updated: 2024-08-05T06:01:49.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6381 vulnerable 2026-06-08 05:11:53.671186 Details available
In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file->stored data.
Published: 2018-01-29T17:00:00.000Z
Updated: 2024-08-05T06:01:49.247Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.