Lucene search

K
redhatRedHatRHSA-2024:2377
HistoryApr 30, 2024 - 6:15 a.m.

(RHSA-2024:2377) Moderate: zziplib security update

2024-04-3006:15:32
access.redhat.com
4
zziplib
security update
invalid memory access
cve-2020-18770
red hat enterprise linux 9.4 release notes

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

  • zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%