CVE-2017-5976 PUBLISHED

Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.

EPSS 0.63% · 70.2th percentile

Risk Scores

EPSS Score
0.63%
70.2th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSzziplib0, 0.13.56-1.1ubuntu1, 0.13.56-1.1ubuntu2
Ubuntu:16.04:LTSzziplib0, 0.13.62-3

Timeline

References

Open in Interactive Console →