Logo
›
›component›zchunk
Name
zchunk
Version
1.2.0
Type
library
Description
-
Licenses
BSD-2-Clause
PURL
-
CPE
cpe:2.3:*:zchunk:zchunk:1.2.0:*:*:*:*:*:*:*

Other Versions#

Project
Branch
Version
yocto
master
1.5.3
yocto
scarthgap
1.4.0

Patches#

#
Title
Author
Resolve
1
Handle overflow errors in malformed zchunk files
Jonathan Dieter <jdieter@gmail.com>
CVE-2023-46228

Vulnerabilities#

Name
Analysis
Description
CVE-2023-46228
Patched
zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.