Description
Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_has_slash function in the mz_os.c file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | minizip | No fix yet | — |
References
- https://github.com/zlib-ng/minizip-ng/issues/739
- FEDORA-2023-5aa1ebc5e9 vendor-advisory
- FEDORA-2023-2ca76c3aae vendor-advisory