Summary
Liu Zhu discovered that ZZIPlib incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service. (CVE-2018-7727)
YiMing Liu discovered that ZZIPlib incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service. (CVE-2020-18442)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | zziplib | 0.13.62-3.2ubuntu1.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | zziplib | 0.13.62-3ubuntu0.16.04.2+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | zziplib | 0.13.62-3.1ubuntu0.18.04.1+esm1 |
Vulnerabilities 2
-
Unscored —
An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdi…
-
Unscored —
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_…