← All advisories

Critical severity9.8NVD Advisory· Published Aug 23, 2017· Updated Jun 17, 2026

CVE-2017-12858

CVE-2017-12858

Description

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Libzip/Libzip2 versions
cpe:2.3:a:libzip:libzip:1.2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libzip:libzip:1.2.0:*:*:*:*:*:*:*
- (no CPE)
osv-coords
pkg:rpm/opensuse/libzip&distro=openSUSE%20Tumbleweed
Range: < 1.8.0-1.2

Patches

Vulnerability mechanics

References

2

github.com/nih-at/libzip/commit/2217022b7d1142738656d891e00b3d2d9179b796nvdPatchThird Party Advisory
www.securityfocus.com/bid/100459nvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.