CVE-2023-46228

Name of the Vulnerable Software and Affected Versions zchunk versions prior to 1.3.2

Description The issue is related to integer overflows in components such as lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. This can be exploited via malformed zchunk files, potentially allowing a local attacker to gain unauthorized access to protected information.

Recommendations For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of malformed zchunk files to minimize the risk of exploitation. Avoid using the vulnerable components until a patch is available.