https://seclists.org/oss-sec/2024/q1/54: CVE-2023-45853: overflows in MiniZip in zlib through 1.3
Published Jan 24, 2024
·Updated
Affected Software
1 affected component
zlib MiniZip<=1.3
Frequently Asked Questions
1
What is the severity of CVE-2023-45853?
CVE-2023-45853 has been classified as a high severity vulnerability due to potential remote code execution risks.
2
How do I fix CVE-2023-45853?
To fix CVE-2023-45853, update to the latest version of zlib that contains the patches addressing this vulnerability.
3
What are the potential impacts of CVE-2023-45853?
The potential impacts of CVE-2023-45853 include data corruption and the possibility of executing arbitrary code.
4
Which versions of zlib are affected by CVE-2023-45853?
CVE-2023-45853 affects versions of zlib that include MiniZip prior to the patched releases post-January 2024.
5
Is there a workaround for CVE-2023-45853?
While a definitive workaround may not exist, avoiding the use of MiniZip in affected applications can mitigate risks until a patch is applied.