CVE-2018-7725
libzzip-0-13: An issue was discovered in ZZIPlib 0.13.68
CVE-2018-7725 is fixed in 2 products on 1 platform, first by libzzip-0-13 0.13.62-3.1ubuntu0.18.04.1, released March 5, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0169
77th percentile
An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libzzip-0-13 · Ubuntu 18.04.6 LTS (bionic) | 0.13.62-3.1ubuntu0.18.04.1 | libzzip-0-13 0.13.62-3.1ubuntu0.18.04.1 | Mar 5, 2018 |
| zziplib-bin · Ubuntu 18.04.6 LTS (bionic) | 0.13.62-3.1ubuntu0.18.04.1 | zziplib-bin 0.13.62-3.1ubuntu0.18.04.1 | Mar 5, 2018 |