CVE-2018-6869
Fixed in a distro release EPSS 3%
In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Products: gdraheim zziplib, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | zziplib | 0.13.68-1 |
| Debian 12 | zziplib | 0.13.62-3.2 |
| Debian 13 | zziplib | 0.13.62-3.2 |
| Debian 14 | zziplib | 0.13.62-3.2 |
| Debian 7 | zziplib | 0.13.56-1.1+deb7u2 |
| Debian 8 | zziplib | 0.13.62-3+deb8u2 |
| Ubuntu 14.04 LTS | zziplib | 0.13.62-2ubuntu0.2 |
| Ubuntu 16.04 LTS | zziplib | 0.13.62-3ubuntu0.16.04.2 |
| Ubuntu 18.04 LTS | zziplib | 0.13.62-3.1ubuntu0.18.04.1 |