VDB
GCVE-VVD-MAGEIA-2024-217
GCVE-VVD-MAGEIA-2024-217
Advisory Published
The archive/zip package's handling of certain types of invalid zip files
differs from the behavior of most zip implementations. This misalignment
could be exploited to create an zip file with contents that vary
depending on the implementation reading the file. The archive/zip
package now rejects files containing these errors. (CVE-2024-24789)
The various Is methods (IsPrivate, IsLoopback, etc) did not work as
expected for IPv4-mapped IPv6 addresses, returning false for addresses
which would return true in their traditional IPv4 forms.
(CVE-2024-24790)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | golang | 0 (affected), 1.21.11-1.mga9 (unaffected), 0 (affected), 1.21.11-1.mga9 (unaffected) | — |
| Mageia | php | 0 (affected), 8.2.25-1.mga9 (unaffected) | — |
References
Updated php packages fix bugs
advisory
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.