CVE-2023-46228: Integer Overflow
Published Oct 19, 2023
·Updated
zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.
Affected Software
1 affected component
zchunk zchunk<1.3.2
Remediation
Patch Available
Patch Available
Event History
Oct 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
05:15 AM
Description
Data Sourced
via NVD·05:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-46228.
2
What is the severity of CVE-2023-46228?
The severity of CVE-2023-46228 is high with a severity score of 7.8.
3
Which software is affected by CVE-2023-46228?
The software affected by CVE-2023-46228 is Zchunk version up to exclusive 1.3.2.
4
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is 190.
5
How can I fix the CVE-2023-46228 vulnerability?
To fix the CVE-2023-46228 vulnerability, update your Zchunk software to version 1.3.2 or later.