CVE-2017-12858

    Dashboard / Vulnerabilities / CVE-2017-12858

    CVE-2017-12858

    Published: 23 Aug 2017Last Modified: 8 Jul 2026

    Summary:

    Details: Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

    References: http://www.securityfocus.com/bid/100459, https://github.com/nih-at/libzip/commit/2217022b7d1142738656d891e00b3d2d9179b796

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- a23ac8a766c556827255111eb35ba928641efbc8
    Fixed -None

    Affected versions

    1.2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High