Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 7: MGASA-2019-0341 Critical: zipios++ Denial Of Service

mageia
Calendar Grey November 30, 2019
Dist Mageia Esm H88
Enhanced zipios++ packages address a vulnerability that might cause service outages or excessive resource consumption.
Updated zipios++ packages fix security vulnerability: Mike Salvatore discovered that Zipios mishandled certain malformed ZIP files

Summary

Updated zipios++ packages fix security vulnerability:
Mike Salvatore discovered that Zipios mishandled certain malformed ZIP files. An attacker could use this vulnerability to cause a denial of service or consume system resources (CVE-2019-13453).

References

- https://bugs.mageia.org/show_bug.cgi?id=25282

- https://ubuntu.com/security/notices/USN-4057-1

- https://www.cve.org/CVERecord?id=CVE-2019-13453

Resolution

SRPMS

- 7/core/zipios++-0.1.5.9-6.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 30 Nov 2019
URL: https://advisories.mageia.org/MGASA-2019-0341.html
Type: security
CVE: CVE-2019-13453

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here