Unscored USN-4811-1 1 CVE

libzip vulnerability

Published Mar 15, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libzip mishandled certain malformed ZIP archives.
A remote attacker could use this vulnerability to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	libzip	1.0.1-0ubuntu1.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	libzip	1.1.2-1.1ubuntu0.1~esm1

Vulnerabilities 1

Unscored —

CVE-2017-14107

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attacke…

libzip libzip libzip Debian Ubuntu Alpine

Sep 1, 2017

References

report
https://ubuntu.com/security/CVE-2017-14107