CVE-2018-6381
CVE-2018-6381
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file->stored data.
CVSS 6.5 · Medium · EPSS 1.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
zziplib Debian:12
- Affected ranges
- ECOSYSTEM: < 0.13.62-3.2
Update to 0.13.62-3.2
zziplib Debian:13
- Affected ranges
- ECOSYSTEM: < 0.13.62-3.2
Update to 0.13.62-3.2
zziplib Debian:14
- Affected ranges
- ECOSYSTEM: < 0.13.62-3.2
Update to 0.13.62-3.2
zziplib Ubuntu:14.04:LTS
- Versions
- 0.13.56-1.1ubuntu1
- 0.13.56-1.1ubuntu2
- 0.13.56-2ubuntu1
- 0.13.62-2
- 0.13.62-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0.13.62-2ubuntu0.2
Update to 0.13.62-2ubuntu0.2
zziplib Ubuntu:16.04:LTS
- Versions
- 0.13.62-3
- 0.13.62-3ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: < 0.13.62-3ubuntu0.16.04.2
Update to 0.13.62-3ubuntu0.16.04.2
zziplib Ubuntu:18.04:LTS
- Versions
- 0.13.62-3.1
- Affected ranges
- ECOSYSTEM: < 0.13.62-3.1ubuntu0.18.04.1
Update to 0.13.62-3.1ubuntu0.18.04.1