GCVE-VVD-MAGEIA-2017-163
Advisory Published
Vulnetix · Advisory published June 9, 2017
Heap-based buffer overflow in __zzip_get32 in fetch.c (CVE-2017-5974). Heap-based buffer overflow in __zzip_get64 in fetch.c (CVE-2017-5975). Heap-based buffer overflow in zzip_mem_entry_extra_block in memdisk.c (CVE-2017-5976). Invalid memory read in zzip_mem_entry_extra_block in memdisk.c (CVE-2017-5977). Out of bounds read in zzip_mem_entry_new in memdisk.c (CVE-2017-5978). NULL pointer dereference in prescan_entry in fseeko.c (CVE-2017-5979). NULL pointer dereference in zzip_mem_entry_new in memdisk.c (CVE-2017-5980). Assertion failure in seeko.c (CVE-2017-5981). NULL pointer dereference in main in unzzipcat-mem.c (bsc#1024532). NULL pointer dereference in main in unzzipcat.c (bsc#1024537).

Affected Products

VendorProductVersionsPlatforms
Mageiazziplib0 (affected), 0.13.62-5.1.mga5 (unaffected)

Aliases

Transitive aliases

References

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.