https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:41:23 +0000 https://vulnerability.circl.lu/vuln/cve-2017-5974 <p>Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</p> <p>Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.</p> https://vulnerability.circl.lu/vuln/cve-2017-5974 https://vulnerability.circl.lu/vuln/usn-3320-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: zziplib, Ubuntu:16.04:LTS: zziplib</p> <p>Agostino Sarubbo discovered that zziplib incorrectly handled certain malformed ZIP files. If a user or automated system were tricked into opening a specially crafted ZIP file, a remote attacker could cause zziplib to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: zziplib, Ubuntu:16.04:LTS: zziplib</p> <p>Agostino Sarubbo discovered that zziplib incorrectly handled certain malformed ZIP files. If a user or automated system were tricked into opening a specially crafted ZIP file, a remote attacker could cause zziplib to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-3320-1