CVE-2017-5977 PUBLISHED

The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.

EPSS 0.46% · 63.7th percentile

Risk Scores

EPSS Score
0.46%
63.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSzziplib0, 0.13.62-3
Ubuntu:14.04:LTSzziplib0.13.56-1.1ubuntu2, 0, 0.13.62-2

Timeline

References

Open in Interactive Console →