CVE-2018-7727
zziplib-bin: An issue was discovered in ZZIPlib 0.13.68
CVE-2018-7727 is fixed in 2 products on 1 platform, first by libzzip-0-13 0.13.62-3.1ubuntu0.18.04.1+esm1, released June 18, 2021. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0124
69th percentile
An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libzzip-0-13 · Ubuntu 18.04.6 LTS (bionic) | 0.13.62-3.1ubuntu0.18.04.1+esm1 | libzzip-0-13 0.13.62-3.1ubuntu0.18.04.1+esm1 | Jun 18, 2021 |
| libzzip-0-13 · Ubuntu 20.04 LTS (focal) | 0.13.62-3.2ubuntu1.1 | libzzip-0-13 0.13.62-3.2ubuntu1.1 | Jun 18, 2021 |
| zziplib-bin · Ubuntu 18.04.6 LTS (bionic) | 0.13.62-3.1ubuntu0.18.04.1+esm1 | zziplib-bin 0.13.62-3.1ubuntu0.18.04.1+esm1 | Jun 18, 2021 |
| zziplib-bin · Ubuntu 20.04 LTS (focal) | 0.13.62-3.2ubuntu1.1 | zziplib-bin 0.13.62-3.2ubuntu1.1 | Jun 18, 2021 |