CVE-2017-5978 PUBLISHED

The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.

EPSS 0.43% · 62.0th percentile

Risk Scores

EPSS Score
0.43%
62.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSzziplib0, 0.13.62-3
Ubuntu:14.04:LTSzziplib0.13.56-1.1ubuntu2, 0, 0.13.62-2

Timeline

References

Open in Interactive Console →