PT-2023-11506 · Zziplib+6 · Zziplib+6

92Wyunchao · Published 2023-08-22 · Updated 2025-08-09 · CVE-2020-18770

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions zziplib version 0.13.69

Description An issue was discovered in the function zzip disk entry to file header in mmapped.c, which will lead to a denial-of-service.

Recommendations For zziplib version 0.13.69, consider applying a patch or fix to resolve the issue in the zzip disk entry to file header function. As a temporary workaround, consider restricting access to the mmapped.c module to minimize the risk of exploitation.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2024:2377

ALSA-2024:3127

AZL-43720

AZL-44868

BDU:2025-16157

CESA-2024_3127

CVE-2020-18770

INFSA-2024_2377

INFSA-2024_3127

MGASA-2024-0167

OESA-2023-1816

OPENSUSE-SU-2024:13746-1

RHSA-2024:2377

RHSA-2024:3127

RHSA-2024_2377

RHSA-2024_3127

SUSE-SU-2024:0961-1

SUSE-SU-2024:0970-1

SUSE-SU-2024_0961-1

Affected Products

Almalinux

Centos

Debian

Red Hat

Rocky Linux

Suse

Zziplib

References · 42

• 🔥 https://github.com/gdraheim/zziplib/issues/69 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2020-18770 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13746-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0961-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0167 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-3127.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-43720 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-18770 · Security Note
• https://osv.dev/vulnerability/AZL-44868 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1816 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-18770 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0167.html · Security Note
• https://linux.oracle.com/errata/ELSA-2024-2377.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0970-1 · Vendor Advisory