Vulnerabilities

TI-2019-13124 CVE-2019-17582 · GHSA-hwrm-p2xq-q6hh

A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows…

MEDIUM 47

A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unzip a malformed ZIP archive.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02481 Published 2021-02-09 No fix listed CWE-416

TI-2017-10274 CVE-2017-14107 · GHSA-r7fp-6p6g-f7f5

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD…

LOW 35

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a c…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03227 Published 2017-09-01 Will not fix CWE-770

TI-2017-09521 CVE-2017-12858 · GHSA-qm7q-x8gp-f7m8

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip…

MEDIUM 48

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03286 Published 2017-08-23 No fix listed CWE-415

Vulnerabilities

Filters

A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows…

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD…

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip…