CVE-2023-45853 json
pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency
published 2023-10-14 3 y ago modified 2026-10-15 25 d ago also EUVD-2023-2778 , GHSA-mq29-j5xf-cjwr , JLSEC-2026-479 , PYSEC-2026-501
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.4%
- EPSS 3.4% chance of exploitation in 30 days, percentile 89%
- public exploits
- 0
- none known
Summary
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.
Patch / fix
- julia Openresty_jll 1.27.1+0
- julia Zlib_jll 1.3.1+0
- zlib zlib 1.3
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5
- Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
- zlib Debian 14, Debian 13 1:1.3.dfsg-2
- minizip Debian 12 1.1-8+deb12u1
debian advisories DEBIAN-CVE-2023-45853
- zlib Ubuntu Pro 14.04 LTS 1:1.2.8.dfsg-1ubuntu1.1+esm3
ubuntu advisories UBUNTU-CVE-2023-45853
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- zlib SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 1.2.13-160000.3.1
- zlib Linux Micro 6.1 1.2.13-slfo.1.1_2.1
- zlib Linux Micro 6.0 1.2.13-7.1
- zlib SLE Module for Development Tools 15 SP5, SLE Module for Basesystem 15 SP5, SLE Micro 5.5 +1 more 1.2.13-150500.4.3.1
- zlib SLE Module for Development Tools 15 SP4, SLE Module for Basesystem 15 SP4, SLE Micro 5.4 +8 more 1.2.11-150000.3.48.1
- zlib SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.2.11-11.37.1
suse advisories SUSE-SU-2026:21013-1SUSE-SU-2026:21151-1SUSE-SU-2026:20659-1SUSE-SU-2026:20709-1SUSE-SU-2024:2431-1SUSE-SU-2023:4217-1
- zlib openSUSE Leap 16.0 1.2.13-160000.3.1
- grype openSUSE Tumbleweed 0.88.0-1.1
opensuse advisories openSUSE-SU-2026:20487-1openSUSE-SU-2025:14857-1
- minizip Alpine 3.18 1.2.13-r1
- minizip Alpine 3.24, Alpine 3.23, Alpine 3.22 +3 more 1.3-r1
- qt5-qtwebengine Alpine 3.18 5.15.13-r9
- qt5-qtwebengine Alpine 3.23, Alpine 3.22, Alpine 3.21 +2 more 5.15.15-r4
- qt6-qtwebengine Alpine 3.24, Alpine 3.23, Alpine 3.22 +3 more 6.6.0-r1
alpine advisories ALPINE-CVE-2023-45853
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- boost CBL-Mariner 2.0 1.76.0-4
- cloud-hypervisor CBL-Mariner 2.0, Azure Linux 3.0 32.0-2
- rust CBL-Mariner 2.0 1.72.0-5
- tcl CBL-Mariner 2.0, Azure Linux 3.0 8.6.13-3
- zlib CBL-Mariner 2.0 1.2.13-2
- rubygem-mini_portile2 CBL-Mariner 2.0, Azure Linux 3.0 2.8.0-1
- rust Azure Linux 3.0 1.75.0-1
- zlib Azure Linux 3.0 1.3.1-1
azure linux advisories AZL-31294AZL-31298AZL-31496AZL-31497AZL-31500AZL-33350
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
- minizip Arch Linux 1:1.3.1-1
arch linux advisories AVG-2847
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2023-45853 updated cvss 5.3
zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6
-
Red Hat build of OpenJDK 1.8 zlib Red Hat build of OpenJDK 11 zlibaffected: no fix planned “Will not fix”
-
Red Hat build of OpenJDK 17 zlibaffected: no fix available
-
Red Hat Enterprise Linux 6 zlib, minizip Red Hat Enterprise Linux 7 zlib, minizipaffected: no fix planned “Out of support scope”
-
Red Hat JBoss Core Servicesfixed: vendor fix RHSA-2023:7626
-
Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/kibana6-rhel8 Red Hat Enterprise Linux 8 zlib Red Hat Enterprise Linux 9 zlib Red Hat OpenShift GitOps openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argo-rollouts-rhel8not affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-26-202-06 updated cvss 9.8
Siemens CADRA
-
Siemens CADRA < 2511affected: fixed in V2511
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-23-348-10 updated cvss 9.8
Siemens SIMATIC S7-1500
-
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= 3.1.0, < 3.1.5 Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) >= 3.1.0, < 3.1.5affected: fixed in V3.1.5, mitigation support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-25-044-09 updated cvss 9.8
Siemens SCALANCE W700 IEEE 802.11ax
-
Siemens SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) <V3.0.0 Siemens SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) <V3.0.0 Siemens SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) <V3.0.0 Siemens SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) <V3.0.0 Siemens SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) <V3.0.0 Siemens SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) <V3.0.0affected: fixed in V3.0.0 support.industry.siemens.com
+13 more productsfewer
Siemens SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) <V3.0.0 Siemens SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) <V3.0.0 Siemens SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) <V3.0.0 Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) <V3.0.0 Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) <V3.0.0 Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) <V3.0.0 Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) <V3.0.0 Siemens SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) <V3.0.0 Siemens SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) <V3.0.0 Siemens SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) <V3.0.0
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 2 y ago
Exploit prediction
3.45% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| OSV | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | pyminizip | <=0.2.6 |
no fix listed |
| julia | GCCBootstrap_jll | all versions |
no fix listed |
| julia | Openresty_jll | <1.27.1+0 |
1.27.1+0 |
| julia | Zlib_jll | <1.3.1+0 |
1.3.1+0 |
Affected products
- zlib zlib
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
- Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Classification
- Weakness
-
- CWE-190 Integer Overflow or Wraparound
References
-
github.com
/madler/zlib/pull/843
web, issue-tracking, patch
-
chromium.googlesource.com
/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61
web, mailing-list, patch
-
chromium.googlesource.com
/chromium/src/+/d709fb23806858847131027da95ef4c548813356
web, mailing-list, patch
-
github.com
/madler/zlib/commit/73331a6a0481067628f065ffe87bb1d8f787d10c
web
-
security.gentoo.org
/glsa/202401-18
vendor-advisory, web, third-party-advisory
-
winimage.com
/zLibDll/minizip.html
web, product
-
github.com
/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4
web, product
-
openwall.com
/lists/oss-security/2023/10/20/9
mailing-list, web
-
lists.debian.org
/debian-lts-announce/2023/11/msg00026.html
mailing-list, web, third-party-advisory
-
security.netapp.com
/advisory/ntap-20231130-0009/
third-party-advisory, web
-
pypi.org
/project/pyminizip/#history
web, release-notes
-
openwall.com
/lists/oss-security/2024/01/24/10
mailing-list, web
-
cert-portal.siemens.com
/productcert/html/ssa-398330.html
web
-
cert-portal.siemens.com
/productcert/html/ssa-769027.html
web
-
cert-portal.siemens.com
/productcert/html/ssa-470355.html
web
-
nvd.nist.gov
/vuln/detail/CVE-2023-45853
advisory
-
github.com
/smihica/pyminizip
package
-
github.com
/smihica/pyminizip/blob/master/zlib-1.2.11/contrib/minizip/zip.c
web
-
security.netapp.com
/advisory/ntap-20231130-0009
web
-
pypi.org
/project/pyminizip
package
-
github.com
/advisories/GHSA-mq29-j5xf-cjwr
advisory
Sources
- CVE List CVE-2023-45853
- GitHub Advisory GHSA-mq29-j5xf-cjwr
- NVD CVE-2023-45853
- OSV JLSEC-2026-479
- OSV PYSEC-2026-501
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Adjust CPE configurations to indicate that version 1.3.1 addressing the flaw is published and that the affected component is minizip, not zlib the library.