CVE-2017-14107

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory…

published September 1, 2017

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03200 · 88.0th percentile
Published
2017-09-01T17:00Z
EPSS history
Timeline
  • 01 SEP 17:00Z
    The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory…
    cvelistv5