CVE-2018-7726
libzzip-0-13: An issue was discovered in ZZIPlib 0.13.68
CVE-2018-7726 is fixed in 2 products on 1 platform, first by libzzip-0-13 0.13.62-3.1ubuntu0.18.04.1, released March 5, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0169
77th percentile
An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libzzip-0-13 · Ubuntu 18.04.6 LTS (bionic) | 0.13.62-3.1ubuntu0.18.04.1 | libzzip-0-13 0.13.62-3.1ubuntu0.18.04.1 | Mar 5, 2018 |
| zziplib-bin · Ubuntu 18.04.6 LTS (bionic) | 0.13.62-3.1ubuntu0.18.04.1 | zziplib-bin 0.13.62-3.1ubuntu0.18.04.1 | Mar 5, 2018 |