Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-14107

The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.9%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
Products affected by CVE-2017-14107
  • Libzip » Libzip » Version: 0.10.
    cpe:2.3:a:libzip:libzip:0.10.
  • Libzip » Libzip » Version: 0.10.1
    cpe:2.3:a:libzip:libzip:0.10.1
  • Libzip » Libzip » Version: 0.11
    cpe:2.3:a:libzip:libzip:0.11
  • Libzip » Libzip » Version: 0.11.1
    cpe:2.3:a:libzip:libzip:0.11.1
  • Libzip » Libzip » Version: 0.11.2
    cpe:2.3:a:libzip:libzip:0.11.2
  • Libzip » Libzip » Version: 0.8
    cpe:2.3:a:libzip:libzip:0.8
  • Libzip » Libzip » Version: 0.9
    cpe:2.3:a:libzip:libzip:0.9
  • Libzip » Libzip » Version: 0.9.1
    cpe:2.3:a:libzip:libzip:0.9.1
  • Libzip » Libzip » Version: 0.9.2
    cpe:2.3:a:libzip:libzip:0.9.2
  • Libzip » Libzip » Version: 0.9.3
    cpe:2.3:a:libzip:libzip:0.9.3
  • Libzip » Libzip » Version: 1.0
    cpe:2.3:a:libzip:libzip:1.0
  • Libzip » Libzip » Version: 1.0.1
    cpe:2.3:a:libzip:libzip:1.0.1
  • Libzip » Libzip » Version: 1.1
    cpe:2.3:a:libzip:libzip:1.1
  • Libzip » Libzip » Version: 1.1.1
    cpe:2.3:a:libzip:libzip:1.1.1
  • Libzip » Libzip » Version: 1.1.2
    cpe:2.3:a:libzip:libzip:1.1.2
  • Libzip » Libzip » Version: 1.1.3
    cpe:2.3:a:libzip:libzip:1.1.3
  • Libzip » Libzip » Version: 1.2.0
    cpe:2.3:a:libzip:libzip:1.2.0
  • Debian » Debian Linux » Version: 9.0
    cpe:2.3:o:debian:debian_linux:9.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved