CVE-2020-18770
Fixed in a distro release EPSS <1%
An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
Products: gdraheim zziplib
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | zziplib | 0.13.68-13.el8_10 |
| AlmaLinux 8 | zziplib-devel | 0.13.68-13.el8_10 |
| AlmaLinux 8 | zziplib-utils | 0.13.68-13.el8_10 |
| AlmaLinux 9 | zziplib | 0.13.71-11.el9_4 |
| AlmaLinux 9 | zziplib-devel | 0.13.71-11.el9_4 |
| AlmaLinux 9 | zziplib-utils | 0.13.71-11.el9_4 |
| Amazon Linux 2 | zziplib | 0.13.62-12.amzn2.0.1 |
| Amazon Linux 2 | zziplib-devel | 0.13.62-12.amzn2.0.1 |
| Amazon Linux 2 | zziplib-utils | 0.13.62-12.amzn2.0.1 |
| Debian 12 | zziplib | no fix |
| Debian 13 | zziplib | 0.13.78+dfsg.1-0.1 |
| Debian 14 | zziplib | 0.13.78+dfsg.1-0.1 |
| Red Hat Enterprise Linux 8 | zziplib | 0:0.13.68-13.el8_10 |
| Red Hat Enterprise Linux 8 | zziplib-debuginfo | 0:0.13.68-13.el8_10 |
| Red Hat Enterprise Linux 8 | zziplib-debugsource | 0:0.13.68-13.el8_10 |
| Red Hat Enterprise Linux 8 | zziplib-devel | 0:0.13.68-13.el8_10 |
| Red Hat Enterprise Linux 8 | zziplib-utils | 0:0.13.68-13.el8_10 |
| Red Hat Enterprise Linux 8 | zziplib-utils-debuginfo | 0:0.13.68-13.el8_10 |
| Red Hat Enterprise Linux 9 | zziplib | 0:0.13.71-11.el9_4 |
| Red Hat Enterprise Linux 9 | zziplib-debuginfo | 0:0.13.71-11.el9_4 |
| Red Hat Enterprise Linux 9 | zziplib-debugsource | 0:0.13.71-11.el9_4 |
| Red Hat Enterprise Linux 9 | zziplib-devel | 0:0.13.71-11.el9_4 |
| Red Hat Enterprise Linux 9 | zziplib-utils | 0:0.13.71-11.el9_4 |
| Red Hat Enterprise Linux 9 | zziplib-utils-debuginfo | 0:0.13.71-11.el9_4 |
| Rocky Linux 8 | zziplib | 0:0.13.68-13.el8_10 |
| Rocky Linux 9 | zziplib | 0:0.13.71-11.el9_4 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | zziplib | 0.13.69-150000.3.17.1 |
| SUSE Linux Enterprise Server 15 SP4-TERADATA | zziplib | 0.13.69-150000.3.17.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | zziplib | 0.13.67-10.36.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | zziplib | 0.13.67-10.36.1 |
| Ubuntu 20.04 LTS | zziplib | no fix |
| Ubuntu 22.04 LTS | zziplib | no fix |
| Ubuntu 24.04 LTS | zziplib | no fix |
| Ubuntu 25.10 | zziplib | no fix |
| Ubuntu 26.04 LTS | zziplib | no fix |
| Ubuntu 26.10 | zziplib | no fix |
| Ubuntu Pro 16.04 LTS | zziplib | no fix |
| Ubuntu Pro 18.04 LTS | zziplib | no fix |
| openSUSE Leap 15.5 | zziplib | 0.13.69-150000.3.17.1 |
| openSUSE Tumbleweed | zziplib | 0.13.72-3.1 |