GCVE - cpe:2.3:a:gdraheim:zziplib:0.13.60:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gdraheim:zziplib:0.13.60:*:*:*:*:*:*:*

part: a version: 0.13.60 update: *

Vendor	Gdraheim (`b728be81-301e-59ad-99e3-d3a908571635`)
Product	Zziplib (`379efeaf-3295-5fb2-a9ff-aea87d1c4947`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/gdraheim/zziplib`	purl2cpe	2026-06-01 10:15:45.654986

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-5976`	vulnerable	2026-06-08 05:09:50.221648	Details available Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. Published: 2017-03-01T15:00:00.000Z Updated: 2024-08-05T15:18:49.522Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2017/02/14/3 http://www.securityfocus.com/bid/96268 https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-zzip_mem_entry_extra_block-memdisk-c/ http://www.debian.org/security/2017/dsa-3878	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5975`	vulnerable	2026-06-08 05:09:50.220981	Details available Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. Published: 2017-03-01T15:00:00.000Z Updated: 2024-08-05T15:18:49.570Z Open on db.gcve.eu Reference links https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get64-fetch-c/ http://www.openwall.com/lists/oss-security/2017/02/14/3 http://www.securityfocus.com/bid/96268 http://www.debian.org/security/2017/dsa-3878	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5974`	vulnerable	2026-06-08 05:09:50.219120	Details available Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. Published: 2017-03-01T15:00:00.000Z Updated: 2024-08-05T15:18:49.380Z Open on db.gcve.eu Reference links https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c/ http://www.openwall.com/lists/oss-security/2017/02/14/3 http://www.securityfocus.com/bid/96268 http://www.debian.org/security/2017/dsa-3878	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

gdraheim (Guido U. Draheim) ZZIPlib 0.13.60

Notes

PURL mappings

Vulnerability references

Contribute