Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade zziplib-debugsourceUpgrade zziplib-utilsUpgrade zziplib-utils-debuginfoUpgrade zziplib-develUpgrade zziplibUpgrade zziplib-debuginfo | Feb 26, 2025 | Jun 27, 2024 |
| Debian | — | No solution existsUpgrade zziplib | May 15, 2025 | Jun 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 27, 2024 |
| Suse | — | Upgrade zziplib-develUpgrade libzzip-0-13 | Dec 5, 2025 | Dec 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub