Unscored severity · published May 19, 2015
CVE-2015-1846
unzoo allows remote attackers to cause a denial of service (infinite loop and resource consumption) via unspecified vectors to the (1) ExtrArch or (2) ListArch function, related…
–
CVSS
2.9%
EPSS
No
On KEV
Description
unzoo allows remote attackers to cause a denial of service (infinite loop and resource consumption) via unspecified vectors to the (1) ExtrArch or (2) ListArch function, related to pointer handling.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UN
Unzoo · Unzoo
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1846
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1846
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/04/01/5
Third Party Advisory
http://www.securityfocus.com/bid/73686
Third Party Advisory
http://www.securitytracker.com/id/1032011
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1207647
More from Unzoo
–
CVE-2015-1845
Buffer overflow in the EntrReadArch function in unzoo might allow remote attackers to execute arbitrary code via unspecified vectors
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…
–
CVE-2004-2190
Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors