Known vulnerabilities in libzip (Alpine package)

Vendor: Alpine Linux Development Team
Software: libzip (Alpine package)
Software CPE: cpe:2.3:o:alpine:libzip_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libzip (Alpine package) libzip (Alpine package) is affected by 2 known vulnerabilities: 1 high, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32992 - Resource exhaustion
CVE-2017-14107		 CWE-400 Low
No
No
 1.2.0-r2 03.08.2020 SB2017090110
SB2017090731
SB2017091343
and 7 more
#VU33051 - Double Free
CVE-2017-12858		 CWE-415 High
No
No
 1.2.0-r2 23.08.2017 SB2017082315
SB2017102508
SB2017110707
and 4 more