adm-zip vulnerabilities (TuxCare)
8 vulnerabilities.
-
adm-zipTuxCare adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event 8.7 High -
adm-zipTuxCare adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass 8.2 High -
adm-zipTuxCare adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation 7.1 High -
adm-zipTuxCare adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size 8.7 High -
adm-zipTuxCare adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction 6.8 Medium -
adm-zipTuxCare adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) 7.5 High -
adm-zipTuxCare adm-zip: Crafted ZIP file triggers 4GB memory allocation 7.5 High -
adm-zipTuxCare Arbitrary File Write in adm-zip 5.5 Medium