Agostino Sarubbo discovered that zziplib incorrectly handled certain malformed ZIP files. If a user or automated system were tricked into opening a specially crafted ZIP file, a remote attacker could cause zziplib to crash, resulting in a denial of service, or possibly execute arbitrary code.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libzzip-0-13", "binary_version": "0.13.62-2ubuntu0.1" }, { "binary_name": "libzzip-dev", "binary_version": "0.13.62-2ubuntu0.1" }, { "binary_name": "zziplib-bin", "binary_version": "0.13.62-2ubuntu0.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libzzip-0-13", "binary_version": "0.13.62-3ubuntu0.16.04.1" }, { "binary_name": "libzzip-dev", "binary_version": "0.13.62-3ubuntu0.16.04.1" }, { "binary_name": "zziplib-bin", "binary_version": "0.13.62-3ubuntu0.16.04.1" } ] }