gdraheim records
22 published records for vendor gdraheim.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-125 Out-of-bounds Read2
- CWE-476 NULL Pointer Dereference2
- CWE-772 Missing Release of Resource after Effective Lifetime2
- CWE-787 Out-of-bounds Write2
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
22 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2024-39134No exploit | A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() gdraheim · zziplib · CWE-120 | High7.5 | — | 0.6% | Jun 27, 2024 |
27Monitor | CVE-2018-6869No exploit | In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c.gdraheim · zziplib · CWE-770 | Medium6.5 | — | 2.8% | Feb 9, 2018 |
27Monitor | CVE-2018-6540No exploit | In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.gdraheim · zziplib | Medium6.5 | — | 2.2% | Feb 2, 2018 |
27Monitor | CVE-2018-6541No exploit | In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fegdraheim · zziplib | Medium6.5 | — | 2.2% | Feb 2, 2018 |
27Monitor | CVE-2018-6484No exploit | In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c.gdraheim · zziplib | Medium6.5 | — | 2.2% | Feb 1, 2018 |
27Monitor | CVE-2018-16548No exploit | An issue was discovered in ZZIPlib through 0.13.69.gdraheim · zziplib · CWE-772 | Medium6.5 | — | 1.9% | Sep 5, 2018 |
27Monitor | CVE-2018-6381No exploit | In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentagdraheim · zziplib · CWE-119 | Medium6.5 | — | 1.6% | Jan 29, 2018 |
27Monitor | CVE-2018-7725No exploit | An issue was discovered in ZZIPlib 0.13.68.gdraheim · zziplib · CWE-119 | Medium6.5 | — | 1.6% | Mar 6, 2018 |
27Monitor | CVE-2018-7726No exploit | An issue was discovered in ZZIPlib 0.13.68.gdraheim · zziplib · CWE-119 | Medium6.5 | — | 1.6% | Mar 6, 2018 |
26Monitor | CVE-2018-7727No exploit | An issue was discovered in ZZIPlib 0.13.68.gdraheim · zziplib · CWE-772 | Medium6.5 | — | 1.2% | Mar 6, 2018 |
26Monitor | CVE-2018-6542No exploit | In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_dgdraheim · zziplib | Medium6.5 | — | 1.2% | Feb 2, 2018 |
23Monitor | CVE-2017-5975No exploit | Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 gdraheim · zziplib · CWE-787 | Medium5.5 | — | 2.0% | Mar 1, 2017 |
23Monitor | CVE-2017-5976No exploit | Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0gdraheim · zziplib · CWE-787 | Medium5.5 | — | 2.0% | Mar 1, 2017 |
23Monitor | CVE-2017-5974No exploit | Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 gdraheim · zziplib · CWE-119 | Medium5.5 | — | 1.8% | Mar 1, 2017 |
23Monitor | CVE-2017-5977No exploit | The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memorygdraheim · zziplib · CWE-125 | Medium5.5 | — | 1.7% | Mar 1, 2017 |
22Monitor | CVE-2017-5981No exploit | seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.gdraheim · zziplib · CWE-617 | Medium5.5 | — | 1.6% | Mar 1, 2017 |
22Monitor | CVE-2017-5978No exploit | The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read andgdraheim · zziplib · CWE-125 | Medium5.5 | — | 1.6% | Mar 1, 2017 |
22Monitor | CVE-2017-5979No exploit | The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference andgdraheim · zziplib · CWE-476 | Medium5.5 | — | 1.6% | Mar 1, 2017 |
22Monitor | CVE-2018-17828No exploit | Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a ..gdraheim · zziplib · CWE-22 | Medium5.5 | — | 1.5% | Oct 1, 2018 |
22Monitor | CVE-2017-5980No exploit | The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereferengdraheim · zziplib · CWE-476 | Medium5.5 | — | 1.2% | Mar 1, 2017 |
22Monitor | CVE-2020-18770No exploit | An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.gdraheim · zziplib · CWE-400 | Medium5.5 | — | 0.3% | Aug 22, 2023 |
13Monitor | CVE-2020-18442No exploit | Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the functiongdraheim · zziplib · CWE-835 | Low3.3 | — | 0.7% | Jun 18, 2021 |
- CVE-2024-3913430Monitor
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer()
HighCVSS 7.5No exploitEPSS 0%gdraheim · zziplibJun 27, 2024
- CVE-2018-686927Monitor
In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c.
MediumCVSS 6.5No exploitEPSS 2%gdraheim · zziplibFeb 9, 2018
- CVE-2018-654027Monitor
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
MediumCVSS 6.5No exploitEPSS 2%gdraheim · zziplibFeb 2, 2018
- CVE-2018-654127Monitor
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fe
MediumCVSS 6.5No exploitEPSS 2%gdraheim · zziplibFeb 2, 2018
- CVE-2018-648427Monitor
In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c.
MediumCVSS 6.5No exploitEPSS 2%gdraheim · zziplibFeb 1, 2018
- CVE-2018-1654827Monitor
An issue was discovered in ZZIPlib through 0.13.69.
MediumCVSS 6.5No exploitEPSS 1%gdraheim · zziplibSep 5, 2018
- CVE-2018-638127Monitor
In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmenta
MediumCVSS 6.5No exploitEPSS 1%gdraheim · zziplibJan 29, 2018
- CVE-2018-772527Monitor
An issue was discovered in ZZIPlib 0.13.68.
MediumCVSS 6.5No exploitEPSS 1%gdraheim · zziplibMar 6, 2018
- CVE-2018-772627Monitor
An issue was discovered in ZZIPlib 0.13.68.
MediumCVSS 6.5No exploitEPSS 1%gdraheim · zziplibMar 6, 2018
- CVE-2018-772726Monitor
An issue was discovered in ZZIPlib 0.13.68.
MediumCVSS 6.5No exploitEPSS 1%gdraheim · zziplibMar 6, 2018
- CVE-2018-654226Monitor
In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_d
MediumCVSS 6.5No exploitEPSS 1%gdraheim · zziplibFeb 2, 2018
- CVE-2017-597523Monitor
Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56
MediumCVSS 5.5No exploitEPSS 2%gdraheim · zziplibMar 1, 2017
- CVE-2017-597623Monitor
Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0
MediumCVSS 5.5No exploitEPSS 2%gdraheim · zziplibMar 1, 2017
- CVE-2017-597423Monitor
Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56
MediumCVSS 5.5No exploitEPSS 1%gdraheim · zziplibMar 1, 2017
- CVE-2017-597723Monitor
The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory
MediumCVSS 5.5No exploitEPSS 1%gdraheim · zziplibMar 1, 2017
- CVE-2017-598122Monitor
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.
MediumCVSS 5.5No exploitEPSS 1%gdraheim · zziplibMar 1, 2017
- CVE-2017-597822Monitor
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and
MediumCVSS 5.5No exploitEPSS 1%gdraheim · zziplibMar 1, 2017
- CVE-2017-597922Monitor
The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and
MediumCVSS 5.5No exploitEPSS 1%gdraheim · zziplibMar 1, 2017
- CVE-2018-1782822Monitor
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a ..
MediumCVSS 5.5No exploitEPSS 1%gdraheim · zziplibOct 1, 2018
- CVE-2017-598022Monitor
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereferen
MediumCVSS 5.5No exploitEPSS 1%gdraheim · zziplibMar 1, 2017
- CVE-2020-1877022Monitor
An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
MediumCVSS 5.5No exploitEPSS 0%gdraheim · zziplibAug 22, 2023
- CVE-2020-1844213Monitor
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function
LowCVSS 3.3No exploitEPSS 0%gdraheim · zziplibJun 18, 2021