Unscored severity · published May 19, 2015
CVE-2015-1845
Buffer overflow in the EntrReadArch function in unzoo might allow remote attackers to execute arbitrary code via unspecified vectors
–
CVSS
5.9%
EPSS
No
On KEV
Description
Buffer overflow in the EntrReadArch function in unzoo might allow remote attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UN
Unzoo · Unzoo
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1845
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1845
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/04/01/5
Third Party Advisory
http://www.securityfocus.com/bid/73693
Third Party Advisory
http://www.securitytracker.com/id/1032011
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1207645
More from Unzoo
–
CVE-2015-1846
unzoo allows remote attackers to cause a denial of service (infinite loop and resource consumption) via unspecified vectors to the (1) ExtrArch or (2) ListArch function, related…
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…
–
CVE-2004-2190
Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors