Most recent entries from all

ALSA-2021:4316 — Low: zziplib security update

Affected: AlmaLinux:8: zziplib, AlmaLinux:8: zziplib-devel, AlmaLinux:8: zziplib-utils

The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file() (CVE-2020-18442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-05680

EUVD-2026-43847

fkie_cve-2020-18442

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

GHSA-g2w2-2g9v-p7fp

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

gsd-2020-18442

OESA-2021-1247 — zziplib security update

Affected: openEuler:20.03-LTS-SP1: zziplib

The zziplib is a lightweight library to easily extract data from zip files. Applications can bundle files into a single zip archive and access them. The implementation is based only on the (free) subset of compression with the zlib algorithm which is actually used by the zip/unzip tools. Security Fix(es): Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".(CVE-2020-18442)

RHSA-2021:4316 — Red Hat Security Advisory: zziplib security update

zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()

SUSE-SU-2021:2164-1 — Security update for zziplib

Security update for zziplib

UBUNTU-CVE-2020-18442

Affected: Ubuntu:Pro:16.04:LTS: zziplib, Ubuntu:Pro:18.04:LTS: zziplib, Ubuntu:20.04:LTS: zziplib

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

WID-SEC-W-2022-0571 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.