{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6",
    "tracking": {
      "current_release_date": "2026-07-23T11:52:26+00:00",
      "generator": {
        "date": "2026-07-23T11:52:26+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.1.0"
        }
      },
      "id": "CVE-2023-45853",
      "initial_release_date": "2023-10-14T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-07-23T11:52:26+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat OpenShift GitOps 1.11.0",
            "product": {
              "name": "Red Hat OpenShift GitOps 1.11.0",
              "product_id": "gitops-1",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift_gitops:1"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform Logging 5.9.z",
            "product": {
              "name": "OpenShift Container Platform Logging 5.9.z",
              "product_id": "openshift-logging-5",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:logging:5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.6.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.6.0.z",
              "product_id": "rhel-8.6.0.z.aus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_aus:8.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.8.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.8.0.z",
              "product_id": "rhel-8.8.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:8.8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.9.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.9.0.z",
              "product_id": "rhel-8.9.0.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.2.0.z",
              "product_id": "rhel-9.2.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.3.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.3.0.z",
              "product_id": "rhel-9.3.0.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "minizip",
            "product": {
              "name": "minizip",
              "product_id": "minizip",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/minizip"
              }
            }
          },
          {
            "category": "product_version",
            "name": "minizip-compat",
            "product": {
              "name": "minizip-compat",
              "product_id": "minizip-compat",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/minizip-compat"
              }
            }
          },
          {
            "category": "product_version",
            "name": "minizip-compat-debuginfo",
            "product": {
              "name": "minizip-compat-debuginfo",
              "product_id": "minizip-compat-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/minizip-compat-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "minizip-compat-devel",
            "product": {
              "name": "minizip-compat-devel",
              "product_id": "minizip-compat-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/minizip-compat-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "minizip-devel",
            "product": {
              "name": "minizip-devel",
              "product_id": "minizip-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/minizip-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-gitops-1/argo-rollouts-rhel8",
            "product": {
              "name": "openshift-gitops-1/argo-rollouts-rhel8",
              "product_id": "openshift-gitops-1/argo-rollouts-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/argo-rollouts-rhel8?repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-gitops-1/argocd-rhel8",
            "product": {
              "name": "openshift-gitops-1/argocd-rhel8",
              "product_id": "openshift-gitops-1/argocd-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/argocd-rhel8?repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-logging/kibana6-rhel8",
            "product": {
              "name": "openshift-logging/kibana6-rhel8",
              "product_id": "openshift-logging/kibana6-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/kibana6-rhel8?repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "zlib",
            "product": {
              "name": "zlib",
              "product_id": "zlib",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/zlib"
              }
            }
          },
          {
            "category": "product_version",
            "name": "zlib-debuginfo",
            "product": {
              "name": "zlib-debuginfo",
              "product_id": "zlib-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/zlib-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "zlib-debugsource",
            "product": {
              "name": "zlib-debugsource",
              "product_id": "zlib-debugsource",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/zlib-debugsource"
              }
            }
          },
          {
            "category": "product_version",
            "name": "zlib-devel",
            "product": {
              "name": "zlib-devel",
              "product_id": "zlib-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/zlib-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "zlib-static",
            "product": {
              "name": "zlib-static",
              "product_id": "zlib-static",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/zlib-static"
              }
            }
          },
          {
            "category": "product_version",
            "name": "zlib",
            "product": {
              "name": "zlib",
              "product_id": "zlib.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/zlib?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "minizip as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:minizip"
        },
        "product_reference": "minizip",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "minizip as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:minizip"
        },
        "product_reference": "minizip",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "minizip-compat as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:minizip-compat"
        },
        "product_reference": "minizip-compat",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "minizip-compat-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:minizip-compat-debuginfo"
        },
        "product_reference": "minizip-compat-debuginfo",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "minizip-compat-devel as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:minizip-compat-devel"
        },
        "product_reference": "minizip-compat-devel",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "minizip-devel as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:minizip-devel"
        },
        "product_reference": "minizip-devel",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "minizip-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:minizip-devel"
        },
        "product_reference": "minizip-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/argo-rollouts-rhel8 as a component of Red Hat OpenShift GitOps 1.11.0",
          "product_id": "gitops-1:openshift-gitops-1/argo-rollouts-rhel8"
        },
        "product_reference": "openshift-gitops-1/argo-rollouts-rhel8",
        "relates_to_product_reference": "gitops-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/argocd-rhel8 as a component of Red Hat OpenShift GitOps 1.11.0",
          "product_id": "gitops-1:openshift-gitops-1/argocd-rhel8"
        },
        "product_reference": "openshift-gitops-1/argocd-rhel8",
        "relates_to_product_reference": "gitops-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8 as a component of OpenShift Container Platform Logging 5.9.z",
          "product_id": "openshift-logging-5:openshift-logging/kibana6-rhel8"
        },
        "product_reference": "openshift-logging/kibana6-rhel8",
        "relates_to_product_reference": "openshift-logging-5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:zlib"
        },
        "product_reference": "zlib",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:zlib"
        },
        "product_reference": "zlib",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:zlib"
        },
        "product_reference": "zlib",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:zlib"
        },
        "product_reference": "zlib",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:zlib"
        },
        "product_reference": "zlib",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:zlib-debuginfo"
        },
        "product_reference": "zlib-debuginfo",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:zlib-debuginfo"
        },
        "product_reference": "zlib-debuginfo",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:zlib-debuginfo"
        },
        "product_reference": "zlib-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:zlib-debuginfo"
        },
        "product_reference": "zlib-debuginfo",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:zlib-debuginfo"
        },
        "product_reference": "zlib-debuginfo",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:zlib-debugsource"
        },
        "product_reference": "zlib-debugsource",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:zlib-debugsource"
        },
        "product_reference": "zlib-debugsource",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:zlib-debugsource"
        },
        "product_reference": "zlib-debugsource",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:zlib-devel"
        },
        "product_reference": "zlib-devel",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:zlib-devel"
        },
        "product_reference": "zlib-devel",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:zlib-devel"
        },
        "product_reference": "zlib-devel",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:zlib-devel"
        },
        "product_reference": "zlib-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:zlib-devel"
        },
        "product_reference": "zlib-devel",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel as a component of Red Hat Enterprise Linux 9.3.0.z",
          "product_id": "rhel-9.3.0.z:zlib-devel"
        },
        "product_reference": "zlib-devel",
        "relates_to_product_reference": "rhel-9.3.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-static as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:zlib-static"
        },
        "product_reference": "zlib-static",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-static as a component of Red Hat Enterprise Linux 8.9.0.z",
          "product_id": "rhel-8.9.0.z:zlib-static"
        },
        "product_reference": "zlib-static",
        "relates_to_product_reference": "rhel-8.9.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-static as a component of Red Hat Enterprise Linux 9.3.0.z",
          "product_id": "rhel-9.3.0.z:zlib-static"
        },
        "product_reference": "zlib-static",
        "relates_to_product_reference": "rhel-9.3.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-static as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:zlib-static"
        },
        "product_reference": "zlib-static",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-static as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:zlib-static"
        },
        "product_reference": "zlib-static",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-static as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:zlib-static"
        },
        "product_reference": "zlib-static",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-static as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:zlib-static"
        },
        "product_reference": "zlib-static",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:zlib.src"
        },
        "product_reference": "zlib.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib.src as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:zlib.src"
        },
        "product_reference": "zlib.src",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:zlib.src"
        },
        "product_reference": "zlib.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib.src as a component of Red Hat Enterprise Linux 8.9.0.z",
          "product_id": "rhel-8.9.0.z:zlib.src"
        },
        "product_reference": "zlib.src",
        "relates_to_product_reference": "rhel-8.9.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib.src as a component of Red Hat Enterprise Linux 9.3.0.z",
          "product_id": "rhel-9.3.0.z:zlib.src"
        },
        "product_reference": "zlib.src",
        "relates_to_product_reference": "rhel-9.3.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib.src as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:zlib.src"
        },
        "product_reference": "zlib.src",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib.src as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:zlib.src"
        },
        "product_reference": "zlib.src",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-45853",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2023-10-16T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "gitops-1:openshift-gitops-1/argo-rollouts-rhel8",
            "gitops-1:openshift-gitops-1/argocd-rhel8",
            "openshift-logging-5:openshift-logging/kibana6-rhel8",
            "rhel-6-els.els:minizip-devel",
            "rhel-6-els.els:zlib-debuginfo",
            "rhel-6-els.els:zlib-devel",
            "rhel-6-els.els:zlib-static",
            "rhel-7-els.els:minizip-devel",
            "rhel-7-els.els:zlib-debuginfo",
            "rhel-7-els.els:zlib-devel",
            "rhel-7-els.els:zlib-static",
            "rhel-8.6.0.z.aus:zlib",
            "rhel-8.6.0.z.aus:zlib-debuginfo",
            "rhel-8.6.0.z.aus:zlib-debugsource",
            "rhel-8.6.0.z.aus:zlib-devel",
            "rhel-8.6.0.z.aus:zlib-static",
            "rhel-8.6.0.z.aus:zlib.src",
            "rhel-8.8.0.z.eus:zlib",
            "rhel-8.8.0.z.eus:zlib-debuginfo",
            "rhel-8.8.0.z.eus:zlib-debugsource",
            "rhel-8.8.0.z.eus:zlib-devel",
            "rhel-8.8.0.z.eus:zlib-static",
            "rhel-8.8.0.z.eus:zlib.src",
            "rhel-8.9.0.z:zlib-static",
            "rhel-8.9.0.z:zlib.src",
            "rhel-9.2.0.z.eus:minizip-compat",
            "rhel-9.2.0.z.eus:minizip-compat-debuginfo",
            "rhel-9.2.0.z.eus:minizip-compat-devel",
            "rhel-9.2.0.z.eus:zlib",
            "rhel-9.2.0.z.eus:zlib-debuginfo",
            "rhel-9.2.0.z.eus:zlib-debugsource",
            "rhel-9.2.0.z.eus:zlib-devel",
            "rhel-9.2.0.z.eus:zlib-static",
            "rhel-9.2.0.z.eus:zlib.src",
            "rhel-9.3.0.z:zlib-devel",
            "rhel-9.3.0.z:zlib-static",
            "rhel-9.3.0.z:zlib.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux default configuration doesn't expose zlib through any network services. Additionally, the user would need to be tricked into opening the crafted file from an attacker to be successful. The impact for Confidentiality, Integrity, and Availability is limited to the scope of the process and user privilege related to the victim, therefore, the impact is considered 'Low'.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "A flaw was found in the MiniZip component of the zlib package. When opening a new file, MiniZip doesn't properly validate the filename, comments, or extra fields length against the data type used to store this information. This may allow an attacker to craft a malicious ZIP file that will lead to an overflow on the length field. This value is further used in memory allocations and indexing, which can cause an out-of-bounds write, leading to heap corruption and possible arbitrary code execution.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-6-els.els:minizip",
          "rhel-6-els.els:zlib",
          "rhel-6-els.els:zlib.src",
          "rhel-7-els.els:minizip",
          "rhel-7-els.els:zlib",
          "rhel-7-els.els:zlib.src"
        ],
        "known_not_affected": [
          "gitops-1:openshift-gitops-1/argo-rollouts-rhel8",
          "gitops-1:openshift-gitops-1/argocd-rhel8",
          "openshift-logging-5:openshift-logging/kibana6-rhel8",
          "rhel-6-els.els:minizip-devel",
          "rhel-6-els.els:zlib-debuginfo",
          "rhel-6-els.els:zlib-devel",
          "rhel-6-els.els:zlib-static",
          "rhel-7-els.els:minizip-devel",
          "rhel-7-els.els:zlib-debuginfo",
          "rhel-7-els.els:zlib-devel",
          "rhel-7-els.els:zlib-static",
          "rhel-8.6.0.z.aus:zlib",
          "rhel-8.6.0.z.aus:zlib-debuginfo",
          "rhel-8.6.0.z.aus:zlib-debugsource",
          "rhel-8.6.0.z.aus:zlib-devel",
          "rhel-8.6.0.z.aus:zlib-static",
          "rhel-8.6.0.z.aus:zlib.src",
          "rhel-8.8.0.z.eus:zlib",
          "rhel-8.8.0.z.eus:zlib-debuginfo",
          "rhel-8.8.0.z.eus:zlib-debugsource",
          "rhel-8.8.0.z.eus:zlib-devel",
          "rhel-8.8.0.z.eus:zlib-static",
          "rhel-8.8.0.z.eus:zlib.src",
          "rhel-8.9.0.z:zlib-static",
          "rhel-8.9.0.z:zlib.src",
          "rhel-9.2.0.z.eus:minizip-compat",
          "rhel-9.2.0.z.eus:minizip-compat-debuginfo",
          "rhel-9.2.0.z.eus:minizip-compat-devel",
          "rhel-9.2.0.z.eus:zlib",
          "rhel-9.2.0.z.eus:zlib-debuginfo",
          "rhel-9.2.0.z.eus:zlib-debugsource",
          "rhel-9.2.0.z.eus:zlib-devel",
          "rhel-9.2.0.z.eus:zlib-static",
          "rhel-9.2.0.z.eus:zlib.src",
          "rhel-9.3.0.z:zlib-devel",
          "rhel-9.3.0.z:zlib-static",
          "rhel-9.3.0.z:zlib.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-45853"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45853"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-45853"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "rhel-6-els.els:minizip",
            "rhel-6-els.els:zlib",
            "rhel-6-els.els:zlib.src",
            "rhel-7-els.els:minizip",
            "rhel-7-els.els:zlib",
            "rhel-7-els.els:zlib.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "gitops-1:openshift-gitops-1/argo-rollouts-rhel8",
            "gitops-1:openshift-gitops-1/argocd-rhel8",
            "openshift-logging-5:openshift-logging/kibana6-rhel8",
            "rhel-6-els.els:minizip",
            "rhel-6-els.els:minizip-devel",
            "rhel-6-els.els:zlib",
            "rhel-6-els.els:zlib-debuginfo",
            "rhel-6-els.els:zlib-devel",
            "rhel-6-els.els:zlib-static",
            "rhel-6-els.els:zlib.src",
            "rhel-7-els.els:minizip",
            "rhel-7-els.els:minizip-devel",
            "rhel-7-els.els:zlib",
            "rhel-7-els.els:zlib-debuginfo",
            "rhel-7-els.els:zlib-devel",
            "rhel-7-els.els:zlib-static",
            "rhel-7-els.els:zlib.src",
            "rhel-8.6.0.z.aus:zlib",
            "rhel-8.6.0.z.aus:zlib-debuginfo",
            "rhel-8.6.0.z.aus:zlib-debugsource",
            "rhel-8.6.0.z.aus:zlib-devel",
            "rhel-8.6.0.z.aus:zlib-static",
            "rhel-8.6.0.z.aus:zlib.src",
            "rhel-8.8.0.z.eus:zlib",
            "rhel-8.8.0.z.eus:zlib-debuginfo",
            "rhel-8.8.0.z.eus:zlib-debugsource",
            "rhel-8.8.0.z.eus:zlib-devel",
            "rhel-8.8.0.z.eus:zlib-static",
            "rhel-8.8.0.z.eus:zlib.src",
            "rhel-8.9.0.z:zlib-static",
            "rhel-8.9.0.z:zlib.src",
            "rhel-9.2.0.z.eus:minizip-compat",
            "rhel-9.2.0.z.eus:minizip-compat-debuginfo",
            "rhel-9.2.0.z.eus:minizip-compat-devel",
            "rhel-9.2.0.z.eus:zlib",
            "rhel-9.2.0.z.eus:zlib-debuginfo",
            "rhel-9.2.0.z.eus:zlib-debugsource",
            "rhel-9.2.0.z.eus:zlib-devel",
            "rhel-9.2.0.z.eus:zlib-static",
            "rhel-9.2.0.z.eus:zlib.src",
            "rhel-9.3.0.z:zlib-devel",
            "rhel-9.3.0.z:zlib-static",
            "rhel-9.3.0.z:zlib.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "gitops-1:openshift-gitops-1/argo-rollouts-rhel8",
            "gitops-1:openshift-gitops-1/argocd-rhel8",
            "openshift-logging-5:openshift-logging/kibana6-rhel8",
            "rhel-6-els.els:minizip",
            "rhel-6-els.els:minizip-devel",
            "rhel-6-els.els:zlib",
            "rhel-6-els.els:zlib-debuginfo",
            "rhel-6-els.els:zlib-devel",
            "rhel-6-els.els:zlib-static",
            "rhel-6-els.els:zlib.src",
            "rhel-7-els.els:minizip",
            "rhel-7-els.els:minizip-devel",
            "rhel-7-els.els:zlib",
            "rhel-7-els.els:zlib-debuginfo",
            "rhel-7-els.els:zlib-devel",
            "rhel-7-els.els:zlib-static",
            "rhel-7-els.els:zlib.src",
            "rhel-8.6.0.z.aus:zlib",
            "rhel-8.6.0.z.aus:zlib-debuginfo",
            "rhel-8.6.0.z.aus:zlib-debugsource",
            "rhel-8.6.0.z.aus:zlib-devel",
            "rhel-8.6.0.z.aus:zlib-static",
            "rhel-8.6.0.z.aus:zlib.src",
            "rhel-8.8.0.z.eus:zlib",
            "rhel-8.8.0.z.eus:zlib-debuginfo",
            "rhel-8.8.0.z.eus:zlib-debugsource",
            "rhel-8.8.0.z.eus:zlib-devel",
            "rhel-8.8.0.z.eus:zlib-static",
            "rhel-8.8.0.z.eus:zlib.src",
            "rhel-8.9.0.z:zlib-static",
            "rhel-8.9.0.z:zlib.src",
            "rhel-9.2.0.z.eus:minizip-compat",
            "rhel-9.2.0.z.eus:minizip-compat-debuginfo",
            "rhel-9.2.0.z.eus:minizip-compat-devel",
            "rhel-9.2.0.z.eus:zlib",
            "rhel-9.2.0.z.eus:zlib-debuginfo",
            "rhel-9.2.0.z.eus:zlib-debugsource",
            "rhel-9.2.0.z.eus:zlib-devel",
            "rhel-9.2.0.z.eus:zlib-static",
            "rhel-9.2.0.z.eus:zlib.src",
            "rhel-9.3.0.z:zlib-devel",
            "rhel-9.3.0.z:zlib-static",
            "rhel-9.3.0.z:zlib.src"
          ]
        }
      ],
      "title": "integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6"
    }
  ]
}