CVE-2018-16548
Fixed in a distro release EPSS 2%
An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.
Products: gdraheim zziplib
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | zziplib | 0.13.62-11.amzn2 |
| Amazon Linux 2 | zziplib-devel | 0.13.62-11.amzn2 |
| Amazon Linux 2 | zziplib-utils | 0.13.62-11.amzn2 |
| Debian 12 | zziplib | 0.13.62-3.2 |
| Debian 13 | zziplib | 0.13.62-3.2 |
| Debian 14 | zziplib | 0.13.62-3.2 |
| Debian 8 | zziplib | 0.13.62-3+deb8u2 |
| Red Hat Enterprise Linux 7 | zziplib | 0:0.13.62-11.el7 |
| Red Hat Enterprise Linux 7 | zziplib-debuginfo | 0:0.13.62-11.el7 |
| Red Hat Enterprise Linux 7 | zziplib-devel | 0:0.13.62-11.el7 |
| Red Hat Enterprise Linux 7 | zziplib-utils | 0:0.13.62-11.el7 |
| SUSE Linux Enterprise Desktop 12 SP4 | zziplib | 0.13.67-10.25.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | zziplib | 0.13.69-3.10.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | zziplib | 0.13.69-3.10.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | zziplib | 0.13.67-10.25.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | zziplib | 0.13.67-10.25.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | zziplib | 0.13.67-10.25.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | zziplib | 0.13.67-10.25.1 |
| Ubuntu Pro 16.04 LTS | zziplib | no fix |
| Ubuntu Pro 18.04 LTS | zziplib | no fix |
| openSUSE Leap 15.0 | zziplib | 0.13.69-lp150.7.1 |
| openSUSE Leap 15.1 | zziplib | 0.13.69-lp151.4.3.1 |
| openSUSE Tumbleweed | zziplib | 0.13.72-1.4 |