Known vulnerabilities in zziplib (Alpine package)

Known vulnerabilities in zziplib (Alpine package)

Vendor: Alpine Linux Development Team

Software: zziplib (Alpine package)

Software CPE: cpe:2.3:o:alpine:zziplib_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU27504 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2018-17828	CWE-22	Medium	No	No	0.13.69-r2, 0.13.70-r0	04.05.2020	SB2018090801 SB2018102520 SB2018102316 and 6 more
#VU14700 - Missing release of memory after effective lifetime CVE-2018-16548	CWE-401	Low	No	No	0.13.69-r2, 0.13.70-r0	07.09.2018	SB2018090801 SB2019080618 SB2019102801 and 2 more
#VU33256 - Heap-based Buffer Overflow CVE-2017-5974	CWE-122	Medium	No	No	0.13.67-r0	01.03.2017	SB2017030113 SB2017072910 SB2017051279 and 1 more
#VU33257 - Heap-based Buffer Overflow CVE-2017-5975	CWE-122	Medium	No	No	0.13.67-r0	01.03.2017	SB2017030114 SB2017072911 SB2017051279 and 1 more
#VU33258 - Heap-based Buffer Overflow CVE-2017-5976	CWE-122	Medium	No	No	0.13.67-r0	01.03.2017	SB2017030115 SB2017072912 SB2017051279 and 1 more
#VU33259 - Out-of-bounds read CVE-2017-5977	CWE-125	Low	No	No	0.13.67-r0	01.03.2017	SB2017030116 SB2017072913 SB2018011827 and 1 more
#VU33260 - Out-of-bounds read CVE-2017-5978	CWE-125	Low	No	No	0.13.67-r0	01.03.2017	SB2017030117 SB2017072914 SB2018011827 and 1 more
#VU33261 - NULL Pointer Dereference CVE-2017-5979	CWE-476	Medium	No	No	0.13.66-r0, 0.13.67-r0	01.03.2017	SB2017030118 SB2017071503 SB2017051279 and 1 more
#VU33262 - Reachable Assertion CVE-2017-5981	CWE-617	Low	No	No	0.13.67-r0	01.03.2017	SB2017030119 SB2017072915 SB2017051279 and 1 more