Libzip CVE-2017-14107 Denial of Service Vulnerability
BID:100854
Info
Libzip CVE-2017-14107 Denial of Service Vulnerability
| Bugtraq ID: | 100854 |
| Class: | Design Error |
| CVE: |
CVE-2017-14107 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 01 2017 12:00AM |
| Updated: | Sep 01 2017 12:00AM |
| Credit: | Agostino Sarubbo |
| Vulnerable: |
libzip libzip 0.10.1 libzip libzip 1.2.0 libzip libzip 1.1.3 libzip libzip 1.1.2 libzip libzip 1.1.1 libzip libzip 1.0.1 libzip libzip 0.93 libzip libzip 0.11.2 libzip libzip 0.10 |
| Not Vulnerable: |
libzip libzip 1.3 |
Discussion
Libzip CVE-2017-14107 Denial of Service Vulnerability
Libzip is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed.
Versions prior to Libzip 1.3.0 are vulnerable.
Libzip is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed.
Versions prior to Libzip 1.3.0 are vulnerable.
Exploit / POC
Libzip CVE-2017-14107 Denial of Service Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
Libzip CVE-2017-14107 Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Libzip CVE-2017-14107 Denial of Service Vulnerability
References:
References: