Summary
Agostino Sarubbo discovered that zziplib incorrectly handled certain
malformed ZIP files. If a user or automated system were tricked into
opening a specially crafted ZIP file, a remote attacker could cause zziplib
to crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | zziplib | 0.13.62-2ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | zziplib | 0.13.62-3ubuntu0.16.04.1 |
Vulnerabilities 7
-
Unscored —
Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.…
-
Unscored —
Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.…
-
Unscored —
Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60…
-
Unscored —
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (o…
-
Unscored —
The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL po…
-
Unscored —
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (N…
-
Unscored —
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a cra…
References
-
report
https://ubuntu.com/security/CVE-2017-5974
-
report
https://ubuntu.com/security/CVE-2017-5975
-
report
https://ubuntu.com/security/CVE-2017-5976
-
report
https://ubuntu.com/security/CVE-2017-5978
-
report
https://ubuntu.com/security/CVE-2017-5979
-
report
https://ubuntu.com/security/CVE-2017-5980
-
report
https://ubuntu.com/security/CVE-2017-5981