CVE-2018-7725

概要

参考情報

• access.redhat.com/errata/RHSA-2018:3229 · Third Party Advisory
• gdraheim/zziplib · Exploit
• lists.debian.org/debian-lts-announce/2020/06/msg00029.html
• usn.ubuntu.com/3699-1 · Third Party Advisory

zziplib のその他の脆弱性

• CVE-2024-39134高 7.5A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() …
• CVE-2020-18770中 5.5An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
• CVE-2020-18442低 3.3Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function…
• CVE-2018-17828中 5.5Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because…
• CVE-2018-16548中 6.5An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, w…