CVE-2017-5976

Description

References

• debian.org/security/2017/dsa-3878 · Third Party Advisory
• openwall.com/lists/oss-security/2017/02/14/3 · Mailing List
• securityfocus.com/bid/96268 · Third Party Advisory
• blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-zzip_mem_entry_extra_block-memdisk-c · Exploit

zziplib 的其他漏洞

• CVE-2024-39134高危 7.5A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() …
• CVE-2020-18770中危 5.5An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
• CVE-2020-18442低危 3.3Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function…
• CVE-2018-17828中危 5.5Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because…
• CVE-2018-16548中危 6.5An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, w…