Pulse of Truth

493 readers

137 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 1 year ago

MODERATORS

krogoth@infosec.pub

USN-7107-1: zlib vulnerability (ubuntu.com)

submitted 3 days ago by lemmydev2@infosec.pub to c/pulse_of_truth@infosec.pub

1 comments fedilink hide all child comments

It was discovered that Minizip in zlib incorrectly handled certain zip header fields. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code.

you are viewing a single comment's thread
view the rest of the comments

[–] Arghblarg@lemmy.ca 2 points 3 days ago

The more general vuln is CVE-2023-45853 apparently, in zlib through version 1.3

https://ubuntu.com/security/CVE-2023-45853#status

is this general to any Linux distro using zlib or just Ubuntu?