Vulnerability in Nih Libzip
CVE-2015-2331
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.
EPSS: 0.277 (97.9th percentile) — read the EPSS interpretation.
Affected products
- Nih Libzip
- Php — versions 5.5.0, 5.5.1, 5.5.2
- Debian Debian_linux — versions 7.0
- Fedoraproject Fedora — versions 22
- Opensuse — versions 13.1, 13.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_HP, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (vendor-advisory, x_refsource_APPLE)
- cve@mitre.org (x_refsource_HP, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA)