Skip to content
OpenAdvisories
Low USN-6048-1 1 CVE

ZenLib vulnerability

Published Apr 28, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ZenLib doesn't check the return value of a specific
operation before using it. An attacker could use a specially crafted input
to crash programs using the library.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS libzen 0.4.37-1ubuntu0.18.04.1
Ubuntu · 20.04 LTS 20.04:LTS libzen 0.4.37-1ubuntu0.20.04.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS libzen 0.4.29-1ubuntu0.1~esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libzen 0.4.32-1ubuntu0.16.04.1+esm1

Vulnerabilities 1

  • Low 3.5
    CVE-2020-36646

    MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerability

    A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argument Value leads to unchecked return va…

    MediaArea ZenLib libzen libzen Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-36646