CVE-2015-2331 Integer overflow in n/a

High 7.5 Published 30 Mar 2015 Updated 6 Aug 2024

Remote attackers can cause denial of service or execute arbitrary code via a crafted ZIP archive due to an integer overflow in libzip.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2015-2331?

CVE-2015-2331 is a high-severity vulnerability in Debian Debian Linux, published on 30 Mar 2015. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.

Weakness: CWE-189

Which versions are affected by CVE-2015-2331?

It affects 5 products.

Linux distribution packages (4)

`libzip` SUSE:Linux Enterprise Desktop 12	All versions	`0.11.1-6.1`
`libzip` SUSE:Linux Enterprise Server 12	All versions	`0.11.1-6.1`
`libzip` SUSE:Linux Enterprise Server for SAP Applications 12	All versions	`0.11.1-6.1`
`libzip` SUSE:Linux Enterprise Software Development Kit 12	All versions	`0.11.1-6.1`

Products include Debian Debian Linux, Fedoraproject Fedora, Nih Libzip, Opensuse Opensuse, Php Php.

How do I fix CVE-2015-2331?

Upgrade to a fixed version.

Is CVE-2015-2331 being exploited?

There is no known exploitation of CVE-2015-2331 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2015-2331, GHSA-wfcw-88hm-m2xm, SUSE-SU-2015:0668-1.