Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-14107
HistorySep 01, 2017 - 12:00 a.m.

CVE-2017-14107

2017-09-0100:00:00
ubuntu.com
ubuntu.com
11

0.003 Low

EPSS

Percentile

71.3%

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0
mishandles EOCD records, which allows remote attackers to cause a denial of
service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a
crafted ZIP archive.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibzip< 1.1.2-1.1ubuntu0.1~esm1UNKNOWN
ubuntu16.04noarchlibzip< 1.0.1-0ubuntu1.1~esm1UNKNOWN