CVE-2017-5974

概要

参考情報

• debian.org/security/2017/dsa-3878 · Third Party Advisory
• openwall.com/lists/oss-security/2017/02/14/3 · Mailing List
• securityfocus.com/bid/96268 · Third Party Advisory
• blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c · Exploit

zziplib のその他の脆弱性

• CVE-2024-39134高 7.5A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() …
• CVE-2020-18770中 5.5An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
• CVE-2020-18442低 3.3Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function…
• CVE-2018-17828中 5.5Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because…
• CVE-2018-16548中 6.5An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, w…