CVE-2017-5974

Опубликовано: 01 мар. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.

Ссылки

http://www.debian.org/security/2017/dsa-3878
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/14/3
Mailing List
http://www.securityfocus.com/bid/96268
Third Party Advisory
VDB Entry
https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c/
Exploit
Third Party Advisory
http://www.debian.org/security/2017/dsa-3878
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/14/3
Mailing List
http://www.securityfocus.com/bid/96268
Third Party Advisory
VDB Entry
https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zziplib_project:zziplib:0.13.56:*:*:*:*:*:*:*

cpe:2.3:a:zziplib_project:zziplib:0.13.57:*:*:*:*:*:*:*

cpe:2.3:a:zziplib_project:zziplib:0.13.58:*:*:*:*:*:*:*

cpe:2.3:a:zziplib_project:zziplib:0.13.59:*:*:*:*:*:*:*

cpe:2.3:a:zziplib_project:zziplib:0.13.60:*:*:*:*:*:*:*

cpe:2.3:a:zziplib_project:zziplib:0.13.61:*:*:*:*:*:*:*

cpe:2.3:a:zziplib_project:zziplib:0.13.62:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00607

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-5974

CVSS3: 5.5

ubuntu

больше 8 лет назад

CVE-2017-5974

CVSS3: 3.7

redhat

больше 8 лет назад

CVE-2017-5974

CVSS3: 5.5

msrc

около 2 месяцев назад

Описание отсутствует

CVE-2017-5974

CVSS3: 5.5

debian

больше 8 лет назад

Heap-based buffer overflow in the __zzip_get32 function in fetch.c in ...

GHSA-2g55-7wqw-h2c5

CVSS3: 5.5

github

около 3 лет назад

EPSS

Процентиль: 69%

0.00607

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119