CVE-2019-13453

Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service

published July 17, 2019

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service. This is related to zipheadio.h:readUint32() and zipfile.cpp:Zipfile::Zipfile().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02026 · 80.8th percentile
Published
2019-07-17T14:17Z
EPSS history
Timeline
  • 17 JUL 14:17Z
    Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service
    cvelistv5