An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2018:3229 | Third Party Advisory |
https://github.com/gdraheim/zziplib/issues/39 | Exploit Issue Tracking Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html | |
https://usn.ubuntu.com/3699-1/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2018-03-06 17:29
Updated : 2024-02-04 19:46
NVD link : CVE-2018-7725
Mitre link : CVE-2018-7725
CVE.ORG link : CVE-2018-7725
JSON object : View
Products Affected
canonical
- ubuntu_linux
redhat
- enterprise_linux_workstation
- enterprise_linux_server
- enterprise_linux_desktop
zziplib_project
- zziplib
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer