CVE-2017-5980 PUBLISHED

The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.

EPSS 0.22% · 44.6th percentile

Risk Scores

EPSS Score
0.22%
44.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSzziplib0, 0.13.56-1.1ubuntu1, 0.13.56-1.1ubuntu2
Ubuntu:16.04:LTSzziplib0, 0.13.62-3

Timeline

References

Open in Interactive Console →