CVE-2017-14107

Published: 01/09/2017 Updated: 06/04/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The _zip_read_eocd64 function in zip_open.c in libzip prior to 1.3.0 mishandles EOCD records, which allows remote malicious users to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libzip libzip
debian debian linux 9.0

Debian Bug report logs - #874010 libzip: CVE-2017-14107: memory allocation failure in _zip_cdir_grow (zip_direntc) Package: src:libzip; Maintainer for src:libzip is Stefan Schörghofer <amd1212@4mdgr>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 1 Sep 2017 21:15:01 UTC Severity: important Tags ...

The _zip_read_eocd64 function in zip_openc in libzip before 130 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_direntc) via a crafted ZIP archive ...

CWE-770 https://github.com/nih-at/libzip/commit/9b46957ec98d85a572e9ef98301247f39338a3b5 https://blogs.gentoo.org/ago/2017/09/01/libzip-memory-allocation-failure-in-_zip_cdir_grow-zip_dirent-c/https://lists.debian.org/debian-lts-announce/2021/12/msg00022.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874010 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-14107

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect