PT-2018-17623 · None+2 · Zziplib+2

Probefuzzer · Publicado 2018-02-02 · Atualizado 2024-06-15 · CVE-2018-6542

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ZZIPlib version 0.13.67

Description The issue is caused by a bus error when handling a disk64 trailer seek value due to the loading of a misaligned address in the zzip disk findfirst function of zzip/mmapped.c.

Recommendations For ZZIPlib version 0.13.67, consider avoiding the use of the zzip disk findfirst function until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2018-6542

MGASA-2019-0093

OPENSUSE-SU-2018_1564-1

OPENSUSE-SU-2024:11546-1

SUSE-SU-2018:1507-1

SUSE-SU-2018_1507-1

Produtos afetados

Debian

Suse

Zziplib

Referências · 41

• 🔥 https://github.com/gdraheim/zziplib/issues/17 · Exploit
• https://suse.com/security/cve/CVE-2017-5978 · Nota
• https://suse.com/security/cve/CVE-2017-5976 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/T5F2Q7GQYRYWHMTEF2OKBIHBBFV6SZBY · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/R5NI6QBHJA6ZI7AYP4BYGADTML3F2LNO · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/MKVLTCQZTM4IO2OP63CRKPLX6NQKLQ2O · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2018-June/004116.html · Nota
• https://suse.com/security/cve/CVE-2018-6542 · Nota
• https://suse.com/security/cve/CVE-2018-6484 · Nota
• https://suse.com/security/cve/CVE-2018-6540 · Nota
• https://lists.opensuse.org/opensuse-updates/2018-06/msg00017.html · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/3KXJTECHGBG7ERFG362MG65JWJTZT5PO · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20181507-1 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-6542 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/zziplib · Aviso do Fabricante