Lucene search
Gentoo FoundationMGASA-2024-0167HistoryMay 09, 2024 - 5:40 a.m.
Updated zziplib packages fix security vulnerability
2024-05-0905:40:29
Gentoo Foundation
advisories.mageia.org
20
zziplib
security
vulnerability
denial-of-service
package fix
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
12.7%
An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. (CVE-2020-18770)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | zziplib | < 0.13.72-2.1 | zziplib-0.13.72-2.1.mga9 |
Related
oraclelinux
oraclelinux
zziplib security update
2024-05-02 00:00:00
zziplib security update
2024-05-23 00:00:00
nessus
nessus
RHEL 8 : zziplib (RHSA-2024:3127)
2024-05-23 00:00:00
Oracle Linux 8 : zziplib (ELSA-2024-3127)
2024-05-28 00:00:00
RHEL 9 : zziplib (RHSA-2024:2377)
2024-04-30 00:00:00
nvd
nvd
CVE-2020-18770
2023-08-22 19:15:55
redhat
redhat
(RHSA-2024:2377) Moderate: zziplib security update
2024-04-30 06:15:32
(RHSA-2024:3127) Moderate: zziplib security update
2024-05-22 06:35:41
osv
osv
CVE-2020-18770
2023-08-22 19:15:55
Moderate: zziplib security update
2024-04-30 00:00:00
Moderate: zziplib security update
2024-05-22 00:00:00
prion
prion
Denial of service
2023-08-22 19:15:00
veracode
veracode
Denial Of Service (DoS)
2023-10-10 08:59:55
cvelist
cvelist
CVE-2020-18770
2023-08-22 00:00:00
almalinux
almalinux
Moderate: zziplib security update
2024-05-22 00:00:00
Moderate: zziplib security update
2024-04-30 00:00:00
debiancve
debiancve
CVE-2020-18770
2023-08-22 19:15:55
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0167)
2024-05-09 00:00:00
redhatcve
redhatcve
CVE-2020-18770
2023-10-30 05:56:53
cve
cve
CVE-2020-18770
2023-08-22 19:15:55
ubuntucve
ubuntucve
CVE-2020-18770
2023-08-22 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
12.7%
Related for MGASA-2024-0167