Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2017-12858

libzip: Double free in _zip_dirent_read function in zip_dirent.c

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Libzip
Products
Libzip
CVE-2017-14107

libzip: Memory allocation failure in _zip_cdir_grow function

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

CVSS 3.1 · 6.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Debian Libzip
Products
Debian Linux Libzip
CVE-2019-17582

libzip: use-after-free in the _zip_dirent_read function of zip_dirent.c

A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unzip a malformed ZIP archive. NOTE: the discoverer states "This use-after-free is triggered prior to the double free reported in CVE-2017-12858."

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Libzip
Products
Libzip