CVE-2017-12858 — Double Free in Libzip

CWE-415 — Double FreeCWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-416 — Use After Free13 documents7 sources
Severity
9.8CRITICALNVD
EPSS
1.0%
top 23.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
LibzipDebian Libzip
Timeline
PublishedAug 23
Latest updateMay 24

Description

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶Ubuntulibzip/libzip< 1.5.1-0ubuntu1+1
▶NVDlibzip/libzip1.2.0
▶debiandebian/libzip

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-hwrm-p2xq-q6hh: A use-after-free in the _zip_dirent_read function of zip_dirent↗2022-05-24
▶
GHSA
GHSA-qm7q-x8gp-f7m8: Double free vulnerability in the _zip_dirent_read function in zip_dirent↗2022-05-17
▶
OSV
CVE-2019-17582: A use-after-free in the _zip_dirent_read function of zip_dirent↗2021-02-09
▶

📋Vendor Advisories

4
Red Hat
libzip: use-after-free in the _zip_dirent_read function of zip_dirent.c↗2021-02-09
▶
Debian
CVE-2019-17582: libzip - A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2....↗2019
▶
Red Hat
libzip: Double free in _zip_dirent_read function in zip_dirent.c↗2017-08-23
▶
Debian
CVE-2017-12858: libzip - Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in li...↗2017
▶

💬Community

4
HackerOne
CVE-2017-12858: Heap UAF in _zip_buffer_free() / Double free in _zip_dirent_read()↗2019-10-08
▶
Bugzilla
CVE-2017-12858 libzip: Double free in _zip_dirent_read function in zip_dirent.c↗2017-08-23
▶
Bugzilla
CVE-2017-12858 mingw-libzip: libzip: Double free in _zip_dirent_read function in zip_dirent.c [fedora-all]↗2017-08-23
▶
Bugzilla
CVE-2017-12858 libzip: Double free in _zip_dirent_read function in zip_dirent.c [fedora-all]↗2017-08-23
▶