CVE-2019-13453

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.03%

Published

Jul 17, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service. This is related to zipheadio.h:readUint32() and zipfile.cpp:Zipfile::Zipfile().

Weaknesses (CWE)

CWE-835

Affected Products (1)

zipios_project · zipios (up to 0.1.7)vulnerable

References (8)

http://www.securityfocus.com/bid/109282

Third Party AdvisoryVDB Entry

https://lists.debian.org/debian-lts-announce/2022/05/msg00041.html

https://salvatoresecurity.com/fun-with-fuzzers-how-i-discovered-three-vulnerabilities-part-2-of-3/

PatchThird Party Advisory

https://sourceforge.net/p/zipios/news/2019/07/version-017-cve-/

PatchThird Party Advisory

http://www.securityfocus.com/bid/109282

Third Party AdvisoryVDB Entry

https://lists.debian.org/debian-lts-announce/2022/05/msg00041.html

https://salvatoresecurity.com/fun-with-fuzzers-how-i-discovered-three-vulnerabilities-part-2-of-3/

PatchThird Party Advisory

https://sourceforge.net/p/zipios/news/2019/07/version-017-cve-/

PatchThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs