Libzip

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Libzip records in CISA KEV

No Libzip vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Libzip 3 records MEDIUM

Records

3 records

TI-2017-09521 CVE-2017-12858 · GHSA-qm7q-x8gp-f7m8

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip…

MEDIUM 48

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03286 Published 2017-08-23 No fix listed CWE-415

TI-2019-13124 CVE-2019-17582 · GHSA-hwrm-p2xq-q6hh

A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows…

MEDIUM 47

A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unzip a malformed ZIP archive.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02481 Published 2021-02-09 No fix listed CWE-416

TI-2017-10274 CVE-2017-14107 · GHSA-r7fp-6p6g-f7f5

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD…

LOW 35

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a c…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03227 Published 2017-09-01 Will not fix CWE-770

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0