Approved changes feed: RSS · Atom

cpe:2.3:a:zziplib_project:zziplib:0.13.58:*:*:*:*:*:*:*

part: a version: 0.13.58 update: *

VendorZziplib Project (7809e9d6-f560-5560-a013-7b55a2dd396b)
ProductZziplib (78c09667-85a6-5f64-9363-486aa83341fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:cpan/zziplib purl2cpe 2026-06-01 10:14:06.835178
pkg:deb/debian/zziplib purl2cpe 2026-06-01 10:14:06.835179
pkg:deb/ubuntu/zziplib purl2cpe 2026-06-01 10:14:06.835181
pkg:github/gdraheim/zziplib purl2cpe 2026-06-01 10:14:06.835182
pkg:rpm/centos/zziplib purl2cpe 2026-06-01 10:14:06.835183
pkg:rpm/fedora/zziplib purl2cpe 2026-06-01 10:14:06.835185
pkg:rpm/opensuse/zziplib purl2cpe 2026-06-01 10:14:06.835186
pkg:sourceforge/zziplib purl2cpe 2026-06-01 10:14:06.835188

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5976 vulnerable 2026-06-08 05:09:50.221473 Details available
Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
Published: 2017-03-01T15:00:00.000Z
Updated: 2024-08-05T15:18:49.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5975 vulnerable 2026-06-08 05:09:50.220794 Details available
Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
Published: 2017-03-01T15:00:00.000Z
Updated: 2024-08-05T15:18:49.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5974 vulnerable 2026-06-08 05:09:50.213067 Details available
Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
Published: 2017-03-01T15:00:00.000Z
Updated: 2024-08-05T15:18:49.380Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.