Pulse of Truth

1542 readers

48 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago

MODERATORS

krogoth

USN-7107-1: zlib vulnerability (ubuntu.com)

submitted 9 months ago by lemmydev2 to c/pulse_of_truth

1 comments fedilink hide all child comments

It was discovered that Minizip in zlib incorrectly handled certain zip header fields. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code.

you are viewing a single comment's thread
view the rest of the comments

[–] Arghblarg@lemmy.ca 2 points 9 months ago

The more general vuln is CVE-2023-45853 apparently, in zlib through version 1.3

https://ubuntu.com/security/CVE-2023-45853#status

is this general to any Linux distro using zlib or just Ubuntu?