CVE-2017-14107
EUVD-2017-561901.09.2017, 17:29
The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libzip | libzip | 𝑥 < 1.3.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libzip |
| ||||||||||||||||||||||||||||||
| php5 |
|
References