PT-2018-3544 · Zziplib+6 · Zziplib+6
Fantasy7082
·
Publicado
2018-03-06
·
Atualizado
2023-08-17
·
CVE-2018-7727
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
ZZIPlib versions 0.13.68
Description:
The issue is related to a memory leak in the
zzip mem disk new function of the ZZIPlib library. This leak occurs due to a resource not being released after its expiration. An attacker, potentially acting remotely, could exploit this issue by using a specially crafted zip file to cause a denial of service.Recommendations:
For ZZIPlib version 0.13.68, consider restricting the use of the
zzip mem disk new function until a patch is available to prevent potential denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Debian
Linuxmint
Red Hat
Suse
Ubuntu
Zziplib