F5-K000149884: Buffer Overflow
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000149884?
The severity of F5-K000149884 is high due to the heap-based buffer overflow vulnerability.
How do I fix F5-K000149884?
To fix F5-K000149884, you should apply the latest patches provided by F5 for the affected products.
Which versions of F5 software are affected by F5-K000149884?
F5-K000149884 affects specific versions of F5 BIG-IP and F5 BIG-IQ Centralized Management within the specified version ranges.
What types of vulnerabilities are indicated in F5-K000149884?
F5-K000149884 indicates an integer overflow and subsequently a heap-based buffer overflow concerning MiniZip in zlib.
Is MiniZip officially supported in zlib according to F5-K000149884?
No, MiniZip is not a supported part of the zlib product as noted in F5-K000149884.