vulnerability

FreeBSD: VID-7764b219-8148-11e8-aa4d-000e0cd7b374 (CVE-2017-5979): zziplib - multiple vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Jul 6, 2018

Added

Jul 10, 2018

Modified

Jun 15, 2026

Description

The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.

Solution

freebsd-upgrade-package-zziplib

References

CVE-2017-5979
https://attackerkb.com/topics/CVE-2017-5979
CWE-476
EUVD-EUVD-2017-15048
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-15048

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report