Search for packages
| purl | pkg:deb/debian/libzip@1.1.2-1.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-yxe1-qn72-aaab
Aliases: CVE-2017-14107 |
The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T14:44:44.464853+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-20T23:50:11.418098+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | None | 36.1.3 |
| 2025-06-08T07:38:03.162467+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T17:13:03.805627+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | None | 36.1.0 |
| 2025-04-12T20:14:27.944676+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T06:10:35.817436+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T15:46:48.858071+00:00 | Debian Oval Importer | Affected by | VCID-yxe1-qn72-aaab | None | 36.0.0 |