CVE Vulnerabilities

CVE-2022-24615

Improper Handling of Exceptional Conditions

Published: Feb 24, 2022 | Modified: Nov 21, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
5.5 LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Ubuntu
LOW

zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library.

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

Name Vendor Start Version End Version
Zip4j Zip4j_project * 2.10.0 (excluding)
Zip4j Ubuntu impish *
Zip4j Ubuntu kinetic *
Zip4j Ubuntu lunar *
Zip4j Ubuntu mantic *
Zip4j Ubuntu trusty *
Zip4j Ubuntu xenial *

References