Search for packages
| purl | pkg:deb/debian/libzip@0.11.2-1.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-yxe1-qn72-aaab
Aliases: CVE-2017-14107 |
The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5ynh-zkyv-aaas | Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow. |
CVE-2015-2331
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T15:44:25.719063+00:00 | Debian Oval Importer | Fixing | VCID-5ynh-zkyv-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:44:44.462890+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T00:53:20.402352+00:00 | Debian Oval Importer | Fixing | VCID-5ynh-zkyv-aaas | None | 36.1.3 |
| 2025-06-20T23:50:11.415984+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | None | 36.1.3 |
| 2025-06-08T08:38:13.350623+00:00 | Debian Oval Importer | Fixing | VCID-5ynh-zkyv-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:38:03.160685+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T18:15:41.848026+00:00 | Debian Oval Importer | Fixing | VCID-5ynh-zkyv-aaas | None | 36.1.0 |
| 2025-06-07T17:13:03.804142+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | None | 36.1.0 |
| 2025-04-12T20:14:27.939638+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:09:17.503047+00:00 | Debian Oval Importer | Fixing | VCID-5ynh-zkyv-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T07:09:39.700275+00:00 | Debian Oval Importer | Fixing | VCID-5ynh-zkyv-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:10:35.812345+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T16:53:10.163379+00:00 | Debian Oval Importer | Fixing | VCID-5ynh-zkyv-aaas | None | 36.0.0 |
| 2025-04-07T15:46:48.851760+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | None | 36.0.0 |