{"id":"UBUNTU-CVE-2023-46228","details":"zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.","modified":"2026-04-22T14:13:24.488745Z","published":"2023-10-19T05:15:00Z","upstream":["CVE-2023-46228"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-46228"},{"type":"REPORT","url":"https://github.com/zchunk/zchunk/commit/08aec2b4dfd7f709b6e3d511411ffcc83ed4efbe"},{"type":"REPORT","url":"https://bugzilla.suse.com/show_bug.cgi?id=1216268"},{"type":"REPORT","url":"https://github.com/zchunk/zchunk/commit/08aec2b4dfd7f709b6e3d511411ffcc83ed4efbe"},{"type":"REPORT","url":"https://github.com/zchunk/zchunk/compare/1.3.1...1.3.2"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2023-46228"}],"affected":[{"package":{"name":"zchunk","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/zchunk@1.1.16+ds1-1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.9+ds1-1","1.1.16+ds1-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libzck1","binary_version":"1.1.16+ds1-1"},{"binary_name":"zchunk","binary_version":"1.1.16+ds1-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-46228.json"}},{"package":{"name":"zchunk","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/zchunk@1.3.2+ds1-1build2?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1+ds1-1","1.3.2+ds1-1","1.3.2+ds1-1build1","1.3.2+ds1-1build2"],"ecosystem_specific":{"binaries":[{"binary_name":"libzck1","binary_version":"1.3.2+ds1-1build2"},{"binary_version":"1.3.2+ds1-1build2","binary_name":"zchunk"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-46228.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}