CVE-2018-6869
libzzip-0-13: In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory functio...
CVE-2018-6869 is fixed in 2 products on 1 platform, first by libzzip-0-13 0.13.62-3.1ubuntu0.18.04.1, released March 5, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0280
86th percentile
In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libzzip-0-13 · Ubuntu 18.04.6 LTS (bionic) | 0.13.62-3.1ubuntu0.18.04.1 | libzzip-0-13 0.13.62-3.1ubuntu0.18.04.1 | Mar 5, 2018 |
| zziplib-bin · Ubuntu 18.04.6 LTS (bionic) | 0.13.62-3.1ubuntu0.18.04.1 | zziplib-bin 0.13.62-3.1ubuntu0.18.04.1 | Mar 5, 2018 |