Skip to content
OpenAdvisories
High USN-7107-1 1 CVE

zlib vulnerability

Published Nov 13, 2024 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Minizip in zlib incorrectly handled certain zip
header fields. An attacker could possibly use this issue to cause a denial
of service, or execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS zlib 1:1.2.8.dfsg-1ubuntu1.1+esm3

Vulnerabilities 1

  • High 8.8
    CVE-2023-45853

    pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

    MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is a…

    qt6-qtwebengine qt5-qtwebengine rust cloud-hypervisor Debian Ubuntu Azure Linux Alpine Wolfi PyPI

References

  • report
    https://ubuntu.com/security/CVE-2023-45853