CVE-2017-12858 Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.
CriticalCVSS 9.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libzip | = 1.2.0 | No fix listed |
| alpine/libzip(Alpine:v3.6) | < 1.2.0-r2 | 1.2.0-r2 |
References
- 100459 third-party-advisory vdb-entry
- github.com patch third-party-advisory
- security.alpinelinux.org vendor-advisory
- Debian Security Tracker CVE-2017-12858 vendor-advisory