Red Hat Security Advisory

RHSA-2021:4316

zziplib security update

Released 2021-11-09 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) zziplib-devel-0.13.68-9.el8
Red Hat Enterprise Linux AppStream (v. 8) zziplib-0.13.68-9.el8, zziplib-utils-0.13.68-9.el8

Fixes 1 record

TI-2020-13391 CVE-2020-18442 · GHSA-g2w2-2g9v-p7fp

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service…

LOW 17

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00745 Published 2021-06-18 Fixed CWE-835