An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade zziplib-develUpgrade zziplib-utilsUpgrade zziplib | May 8, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade zziplib-utilsUpgrade zziplib-develUpgrade zziplib-debuginfoUpgrade zziplib | Nov 4, 2024 | Aug 22, 2023 |
| Debian | — | No solution existsUpgrade zziplib | May 15, 2025 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade zziplib-develUpgrade zziplibUpgrade zziplib-utils | May 7, 2024 | Oct 28, 2023 |
| Redhat_linux | — | Upgrade zziplib-debuginfoNo solution existsUpgrade zziplib-develUpgrade zziplib-utilsUpgrade zziplib-utils-debuginfoUpgrade zziplib-debugsourceUpgrade zziplib | May 1, 2024 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade zziplib-debuginfoUpgrade zziplib-utils-debuginfoUpgrade zziplibUpgrade zziplib-debugsourceUpgrade zziplib-develUpgrade zziplib-utils | May 8, 2025 | Aug 22, 2023 |
| Suse | — | Upgrade libzzip-0-13-32bitUpgrade zziplib-devel-32bitUpgrade libzzip-0-13Upgrade zziplib-devel | Aug 9, 2024 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub