Vulnerabilities > Zziplib Project > Zziplib > 0.13.58
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-09-05 | CVE-2018-16548 | Missing Release of Resource after Effective Lifetime vulnerability in Zziplib Project Zziplib An issue was discovered in ZZIPlib through 0.13.69. | 6.5 |
2017-03-01 | CVE-2017-5976 | Out-of-bounds Write vulnerability in multiple products Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. | 5.5 |
2017-03-01 | CVE-2017-5975 | Out-of-bounds Write vulnerability in multiple products Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. | 5.5 |
2017-03-01 | CVE-2017-5974 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. | 5.5 |