Lucene search
Veracode Vulnerability DatabaseVERACODE:32995HistoryNov 17, 2021 - 10:36 p.m.
Denial Of Service (DoS)
2021-11-1722:36:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
43.0%
zziplib is vulnerable to denial of service. Infinite Loop in zziplib allows remote attackers to cause a denial of service via the return value “zzip_file_read” in the function “unzzip_cat_file”.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zziplib | eq | 0.13.68__7.el8 | |
| zziplib | eq | 0.13.68__7.el8 |
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
access.redhat.com/errata/RHSA-2021:4316
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=1973826
github.com/gdraheim/zziplib/issues/68
lists.debian.org/debian-lts-announce/2021/12/msg00021.html
lists.fedoraproject.org/archives/list/[email protected]/message/TCFYD46OY4VAGJ4UX7IFOH5SHD4UW4ZA/
lists.fedoraproject.org/archives/list/[email protected]/message/VVANTEBDQGOIPC5KCEVAGA5KT4KKTGWB/
Related
openvas
openvas
Debian: Security Advisory (DLA-2859-1)
2021-12-29 00:00:00
Huawei EulerOS: Security Advisory for zziplib (EulerOS-SA-2021-2491)
2021-09-24 00:00:00
Fedora: Security Advisory for zziplib (FEDORA-2022-737e44718a)
2022-02-18 00:00:00
nvd
nvd
CVE-2020-18442
2021-06-18 15:15:08
nessus
nessus
Oracle Linux 8 : zziplib (ELSA-2021-4316)
2021-11-17 00:00:00
Amazon Linux 2022 : (ALAS2022-2022-162)
2022-11-04 00:00:00
CentOS 8 : zziplib (CESA-2021:4316)
2021-11-11 00:00:00
cvelist
cvelist
CVE-2020-18442
2021-06-18 14:25:51
osv
osv
Low: zziplib security update
2021-11-09 08:59:11
Low: zziplib security update
2021-11-09 08:59:11
CVE-2020-18442
2021-06-18 15:15:08
redhat
redhat
(RHSA-2021:4316) Low: zziplib security update
2021-11-09 08:59:11
debiancve
debiancve
CVE-2020-18442
2021-06-18 15:15:08
fedora
fedora
[SECURITY] Fedora 34 Update: zziplib-0.13.72-1.fc34
2022-02-18 01:13:44
[SECURITY] Fedora 35 Update: zziplib-0.13.72-1.fc35
2022-02-18 01:38:21
oraclelinux
oraclelinux
zziplib security update
2021-11-16 00:00:00
rocky
rocky
zziplib security update
2021-11-09 08:59:11
mageia
mageia
Updated zziplib packages fix security vulnerability
2021-07-20 13:46:47
prion
prion
Design/Logic Flaw
2021-06-18 15:15:00
almalinux
almalinux
Low: zziplib security update
2021-11-09 08:59:11
debian
debian
[SECURITY] [DLA 2859-1] zziplib security update
2021-12-27 23:50:24
redhatcve
redhatcve
CVE-2020-18442
2021-06-18 19:50:08
cve
cve
CVE-2020-18442
2021-06-18 15:15:08
ubuntucve
ubuntucve
CVE-2020-18442
2021-06-18 00:00:00
ubuntu
ubuntu
ZZIPlib vulnerabilities
2023-08-17 00:00:00