An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the _zzipparserootdirectory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "libzzip-0-13", "binary_version": "0.13.62-2ubuntu0.2" }, { "binary_name": "libzzip-dev", "binary_version": "0.13.62-2ubuntu0.2" }, { "binary_name": "zziplib-bin", "binary_version": "0.13.62-2ubuntu0.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "libzzip-0-13", "binary_version": "0.13.62-3ubuntu0.16.04.2" }, { "binary_name": "libzzip-dev", "binary_version": "0.13.62-3ubuntu0.16.04.2" }, { "binary_name": "zziplib-bin", "binary_version": "0.13.62-3ubuntu0.16.04.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "libzzip-0-13", "binary_version": "0.13.62-3.1ubuntu0.18.04.1" }, { "binary_name": "libzzip-0-13-dbgsym", "binary_version": "0.13.62-3.1ubuntu0.18.04.1" }, { "binary_name": "libzzip-dev", "binary_version": "0.13.62-3.1ubuntu0.18.04.1" }, { "binary_name": "zziplib-bin", "binary_version": "0.13.62-3.1ubuntu0.18.04.1" }, { "binary_name": "zziplib-bin-dbgsym", "binary_version": "0.13.62-3.1ubuntu0.18.04.1" } ] }