Bug 769797 (CVE-2019-17582)

Summary:	dev-libs/libzip: Use-after-free (CVE-2019-17582)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED OBSOLETE
Severity:	normal	CC:	kde
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Sam James archtester

2021-02-09 20:00:46 UTC

Description:
"A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unzip a malformed ZIP archive. NOTE: the discoverer states "This use-after-free is triggered prior to the double free reported in CVE-2017-12858.""

Comment 1 Sam James archtester

2021-02-09 20:01:24 UTC

Oh, nevermind.