https://seclists.org/oss-sec/2023/q4/167: CVE-2023-45853: overflows in MiniZip in zlib through 1.3
Published Oct 20, 2023
·Updated
Affected Software
1 affected component
zlib MiniZip<1.3
Frequently Asked Questions
1
What is the severity of CVE-2023-45853?
CVE-2023-45853 is considered a high-severity vulnerability due to the potential for remote code execution via heap-based buffer overflow.
2
How do I fix CVE-2023-45853?
To mitigate CVE-2023-45853, it is recommended to upgrade to a version of zlib that does not include MiniZip or apply relevant patches if available.
3
What software is affected by CVE-2023-45853?
CVE-2023-45853 affects MiniZip in zlib version 1.3 and earlier.
4
What type of vulnerability is CVE-2023-45853?
CVE-2023-45853 is characterized as an integer overflow leading to a heap-based buffer overflow.
5
Is MiniZip still supported after CVE-2023-45853?
MiniZip is not a supported part of the zlib product, which means there may not be ongoing security updates for vulnerabilities like CVE-2023-45853.