Security Advisory

CVE-2019-16892

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-25 00:00:00

Last updated 2024-08-05 01:24:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).

← Browse all CVEs View on cve.org ↗