Lucene search
Veracode Vulnerability DatabaseVERACODE:21026HistoryAug 07, 2019 - 7:11 a.m.
Denial Of Service (DoS)
2019-08-0707:11:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.003
Percentile
70.3%
zziplib is vulnerable to denial of service (DoS). The attack is possible because the function __zzip_parse_root_directory in zip.c does not handle the memory and free the memory properly, causing memory leaks.
References
lists.opensuse.org/opensuse-security-announce/2019-10/msg00065.html
lists.opensuse.org/opensuse-security-announce/2019-10/msg00066.html
access.redhat.com/errata/RHSA-2019:2196
github.com/gdraheim/zziplib/commit/0e1dadb05c1473b9df2d7b8f298dab801778ef99
github.com/gdraheim/zziplib/commit/9411bde3e4a70a81ff3ffd256b71927b2d90dcbb
github.com/gdraheim/zziplib/commit/d2e5d5c53212e54a97ad64b793a4389193fec687
github.com/gdraheim/zziplib/issues/58
lists.debian.org/debian-lts-announce/2020/06/msg00029.html
Related
prion
prion
Memory corruption
2018-09-05 21:29:00
osv
osv
CVE-2018-16548
2018-09-05 21:29:03
zziplib - security update
2020-06-28 00:00:00
libzzip-0-13-0.13.72-1.4 on GA media
2024-06-15 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:2750-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for zziplib (openSUSE-SU-2019:2394-1)
2019-10-29 00:00:00
openSUSE: Security Advisory for zziplib (openSUSE-SU-2019:2396-1)
2020-01-09 00:00:00
cve
cve
CVE-2018-16548
2018-09-05 21:29:03
cbl_mariner
cbl_mariner
CVE-2018-16548 affecting package zziplib for versions less than 0.13.69-8
2023-01-27 21:29:56
CVE-2018-16548 affecting package zziplib for versions less than 0.13.69-8
2023-01-27 21:29:56
cvelist
cvelist
CVE-2018-16548
2018-09-05 21:00:00
nvd
nvd
CVE-2018-16548
2018-09-05 21:29:03
suse
suse
Security update for zziplib (moderate)
2019-10-28 00:00:00
Security update for zziplib (moderate)
2019-10-28 00:00:00
ubuntucve
ubuntucve
CVE-2018-16548
2018-09-05 00:00:00
nessus
nessus
openSUSE Security Update : zziplib (openSUSE-2019-2394)
2019-10-29 00:00:00
openSUSE Security Update : zziplib (openSUSE-2019-2396)
2019-10-29 00:00:00
SUSE SLED15 / SLES15 Security Update : zziplib (SUSE-SU-2019:2750-1)
2019-10-24 00:00:00
alpinelinux
alpinelinux
CVE-2018-16548
2018-09-05 21:29:03
redhatcve
redhatcve
CVE-2018-16548
2018-09-06 18:19:02
debiancve
debiancve
CVE-2018-16548
2018-09-05 21:29:03
redhat
redhat
(RHSA-2019:2196) Low: zziplib security update
2019-08-06 08:12:11
amazon
amazon
Low: zziplib
2019-11-04 22:40:00
centos
centos
zziplib security update
2019-08-30 04:38:06
oraclelinux
oraclelinux
zziplib security update
2019-08-13 00:00:00
debian
debian
[SECURITY] [DLA 2258-1] zziplib security update
2020-06-28 12:37:46
mageia
mageia
Updated zziplib packages fix security vulnerability
2019-02-21 01:18:01