Search for packages
| purl | pkg:deb/debian/libzip@1.5.1-4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-yxe1-qn72-aaab | The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive. |
CVE-2017-14107
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T14:44:44.466823+00:00 | Debian Oval Importer | Fixing | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-20T23:50:11.420230+00:00 | Debian Oval Importer | Fixing | VCID-yxe1-qn72-aaab | None | 36.1.3 |
| 2025-06-08T07:38:03.164275+00:00 | Debian Oval Importer | Fixing | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T17:13:03.807131+00:00 | Debian Oval Importer | Fixing | VCID-yxe1-qn72-aaab | None | 36.1.0 |
| 2025-04-12T20:14:27.949961+00:00 | Debian Oval Importer | Fixing | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T06:10:35.822287+00:00 | Debian Oval Importer | Fixing | VCID-yxe1-qn72-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T15:46:48.864610+00:00 | Debian Oval Importer | Fixing | VCID-yxe1-qn72-aaab | None | 36.0.0 |