2 matches found
SUSE-SU-2017:2546-1 Security update for libzip
This update for libzip fixes one issues. This security issue was fixed: - CVE-2017-14107: The zipreadeocd64 function mishandled EOCD records, which allowed remote attackers to cause a denial of service memory allocation failure in zipcdirgrow in zipdirent.c via a crafted ZIP archive bsc1056996...
6.5CVSS6.2AI score0.032EPSS
SaveExploits0References3
SUSE-SU-2015:0668-1 Security update for libzip
Libzip was updated to fix one security issue. A zip file with an unusually large number of entries could have caused an integer overflow leading to a write past the heap boundary, crashing the application. CVE-2015-2331 bnc923240...
7.5CVSS6.5AI score0.27692EPSS
SaveExploits1References3
20