Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade zziplib-utils-debuginfoUpgrade zziplibUpgrade zziplib-develUpgrade zziplib-debuginfoUpgrade zziplib-utilsUpgrade zziplib-debugsource | Feb 26, 2025 | Jun 27, 2024 |
| Debian | — | No solution existsUpgrade zziplib | May 15, 2025 | Jun 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 27, 2024 |
| Suse | — | Upgrade libzzip-0-13Upgrade zziplib-devel | Dec 5, 2025 | Dec 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub