Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Debian LTS: DLA-2858-1 Critical Libzip Denial Of Service Update

debian lts
Calendar Grey December 27, 2021
Dist Debian Esm H88
Enhance libzip library to mitigate denial of service risk identified in specially constructed ZIP files.
An issue has been found in libzip, a library for reading, creating, and modifying zip archives
Topics%20covered

Topics Covered

security advisory denial of service remote attack libzip debian lts

Summary

An issue has been found in libzip, a library for reading, creating, and
modifying zip archives.
Crafted ZIP archives could allow remote attackers to cause denial of
service due to memorey allocation failure by mishandling EOCD records.


For Debian 9 stretch, this problem has been fixed in version
1.1.2-1.1+deb9u1.

We recommend that you upgrade your libzip packages.

For the detailed security status of libzip please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libzip

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libzip
Version: 1.1.2-1.1+deb9u1
CVE ID: CVE-2017-14107

Topics%20covered

Topics Covered

security advisory denial of service remote attack libzip debian lts

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.