It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-162 advisory.

    Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return     value zzip_file_read in the function unzzip_cat_file. (CVE-2020-18442)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4316 advisory.

  - zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()     (CVE-2020-18442)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4316 advisory.

    - Fix CVE-2020-18442

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2591:01 advisory.

    * zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()     (CVE-2020-18442)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4316 advisory.

  - Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return     value zzip_file_read in the function unzzip_cat_file. (CVE-2020-18442)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-530a16ceb1 advisory.

    Automatic update for zziplib-0.13.72-1.fc37.

    ##### **Changelog**

    ```
    * Wed Feb  9 2022 Alexander Bokovoy <abokovoy@redhat.com> - 0.13.72-1
    - 0.13.72
    - Fixes CVE-2020-18442
    - Resolves: rhbz#1973831
    - Switch build to CMake, drop 32-bit patches as checks integrated in CMake already

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
167006	Amazon Linux 2022 : zziplib, zziplib-devel, zziplib-utils (ALAS2022-2022-162)	Nessus	Amazon Linux Local Security Checks	2022/11/4	2024/12/11	low
155125	CentOS 8 : zziplib (CESA-2021:4316)	Nessus	CentOS Local Security Checks	2021/11/11	2023/11/24	low
155408	Oracle Linux 8 : zziplib (ELSA-2021-4316)	Nessus	Oracle Linux Local Security Checks	2021/11/17	2024/11/1	low
294399	MiracleLinux 8 : zziplib-0.13.68-9.el8 (AXSA:2021-2591:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	low
157725	AlmaLinux 8 : zziplib (ALSA-2021:4316)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	low
211198	Fedora 37 : zziplib (2022-530a16ceb1)	Nessus	Fedora Local Security Checks	2024/11/14	2024/11/14	low

偵測

搜尋 Plugin

low

low

low

low

low

low