SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

CVE-2017-14107 -- php5, libzip-dev

ID: oval:org.secpod.oval:def:1900262	Date: (C)2019-02-28 (M)2023-12-20
Class: VULNERABILITY	Family: unix

The _zip_read_eocd64 function in zip_open.c in libzip-dev before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service via a crafted ZIP archive.

Platform:

Ubuntu 16.04

Ubuntu 18.10

Ubuntu 14.04

Ubuntu 18.04

Product:

php5

libzip-dev

Reference:

CVE-2017-14107


30479



423868



248364



909



195388



282