The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function
    __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack. (CVE-2018-16548)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for zziplib fixes the following issues :

Security issues fixed :

CVE-2018-16548: Avoid a memory leak from __zzip_parse_root_directory() which could lead to denial of service. (bsc#1107424)

CVE-2018-7727: Fixed a memory leak in unzzip_cat() (bsc#1084515).

Non-security issue fixed: Prevented division by zero by first checking if uncompressed size is 0. This may happen with directories which have a compressed and uncompressed size of 0. (bsc#1129403)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in ZZIPlib through 0.13.69.
    There is a memory leak triggered in the function
    __zzip_parse_root_directory in zip.c, which will lead     to a denial of service attack.(CVE-2018-16548)

  - Heap-based buffer overflow in the __zzip_get32 function     in fetch.c in zziplib 0.13.62 allows remote attackers     to cause a denial of service (crash) via a crafted ZIP     file.(CVE-2017-5974)

  - Heap-based buffer overflow in the __zzip_get64 function     in fetch.c in zziplib 0.13.62 allows remote attackers     to cause a denial of service (crash) via a crafted ZIP     file.(CVE-2017-5975)

  - Heap-based buffer overflow in the     zzip_mem_entry_extra_block function in memdisk.c in     zziplib 0.13.62 allows remote attackers to cause a     denial of service (crash) via a crafted ZIP     file.(CVE-2017-5976)

  - In ZZIPlib 0.13.67, there is a bus error caused by     loading of a misaligned address (when handling     disk64_trailer local entries) in
    __zzip_fetch_disk_trailer (zzip/zip.c). Remote     attackers could leverage this vulnerability to cause a     denial of service via a crafted zip     file.(CVE-2018-6541)

  - In ZZIPlib 0.13.67, there is a bus error caused by     loading of a misaligned address in the     zzip_disk_findfirst function of zzip/mmapped.c. Remote     attackers could leverage this vulnerability to cause a     denial of service via a crafted zip     file.(CVE-2018-6540)

  - In ZZIPlib 0.13.67, there is a memory alignment error     and bus error in the __zzip_fetch_disk_trailer function     of zzip/zip.c. Remote attackers could leverage this     vulnerability to cause a denial of service via a     crafted zip file.(CVE-2018-6484)

  - In ZZIPlib 0.13.67, there is a segmentation fault     caused by invalid memory access in the zzip_disk_fread     function (zzip/mmapped.c) because the size variable is     not validated against the amount of file->stored     data.(CVE-2018-6381)

  - In ZZIPlib 0.13.68, there is an uncontrolled memory     allocation and a crash in the
    __zzip_parse_root_directory function of zzip/zip.c.
    Remote attackers could leverage this vulnerability to     cause a denial of service via a crafted zip     file.(CVE-2018-6869)

  - seeko.c in zziplib 0.13.62 allows remote attackers to     cause a denial of service (assertion failure and crash)     via a crafted ZIP file.(CVE-2017-5981)

  - The prescan_entry function in fseeko.c in zziplib     0.13.62 allows remote attackers to cause a denial of     service (NULL pointer dereference and crash) via a     crafted ZIP file.(CVE-2017-5979)

  - The zzip_mem_entry_extra_block function in memdisk.c in     zziplib 0.13.62 allows remote attackers to cause a     denial of service (invalid memory read and crash) via a     crafted ZIP file.(CVE-2017-5977)

  - The zzip_mem_entry_new function in memdisk.c in zziplib     0.13.62 allows remote attackers to cause a denial of     service (out-of-bounds read and crash) via a crafted     ZIP file.(CVE-2017-5978)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2196 advisory.

    The zziplib is a lightweight library to easily extract data from zip files.

    Security Fix(es):

    * zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c (CVE-2018-6541)

    * zziplib: Memory leak triggered in the function __zzip_parse_root_directory in zip.c (CVE-2018-16548)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for zziplib fixes the following issues :

Security issue fixed :

  - CVE-2018-16548: Prevented memory leak from
    __zzip_parse_root_directory(). Free allocated structure     if its address is not passed back. (bsc#1107424)

Other issue addressed :

  - Prevented a division by zero (bsc#1129403). This update     was imported from the SUSE:SLE-15:Update update project.

ID	名稱	產品	系列	已發布	已更新	嚴重性
257975	Linux Distros Unpatched Vulnerability : CVE-2018-16548	Nessus	Misc.	2025/8/27	2026/9/2	medium
132335	SUSE SLED12 Security Update : zziplib (SUSE-SU-2019:3341-1)	Nessus	SuSE Local Security Checks	2019/12/20	2024/4/2	medium
132220	EulerOS 2.0 SP3 : zziplib (EulerOS-SA-2019-2685)	Nessus	Huawei Local Security Checks	2019/12/18	2024/4/3	medium
127695	RHEL 7 : zziplib (RHSA-2019:2196)	Nessus	Red Hat Local Security Checks	2019/8/12	2024/11/6	medium
130355	openSUSE Security Update : zziplib (openSUSE-2019-2394)	Nessus	SuSE Local Security Checks	2019/10/29	2024/4/16	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium