Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3699-1
HistoryJul 03, 2018 - 12:00 a.m.

zziplib vulnerabilities

2018-07-0300:00:00
ubuntu.com
32

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

76.6%

JSON

Releases

  • Ubuntu 18.04 ESM
  • Ubuntu 17.10
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • zziplib - library providing read access on ZIP-archives - library

Details

It was discovered that zziplib incorrectly handled certain malformed ZIP
files. If a user or automated system were tricked into opening a specially
crafted ZIP file, a remote attacker could cause zziplib to crash, resulting
in a denial of service, or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlibzzip-0-13< 0.13.62-3.1ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchlibzzip-0-13-dbgsym< 0.13.62-3.1ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchlibzzip-dev< 0.13.62-3.1ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchzziplib-bin< 0.13.62-3.1ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchzziplib-bin-dbgsym< 0.13.62-3.1ubuntu0.18.04.1UNKNOWN
Ubuntu17.10noarchlibzzip-0-13< 0.13.62-3.1ubuntu0.17.10.1UNKNOWN
Ubuntu17.10noarchlibzzip-0-13-dbgsym< 0.13.62-3.1ubuntu0.17.10.1UNKNOWN
Ubuntu17.10noarchlibzzip-dev< 0.13.62-3.1ubuntu0.17.10.1UNKNOWN
Ubuntu17.10noarchzziplib-bin< 0.13.62-3.1ubuntu0.17.10.1UNKNOWN
Ubuntu17.10noarchzziplib-bin-dbgsym< 0.13.62-3.1ubuntu0.17.10.1UNKNOWN
Rows per page:
1-10 of 161

Related

nessus 31
openvas 12
osv 9
debian 2
fedora 4
mageia 1
ubuntucve 7
freebsd 1
centos 2
archlinux 1
oraclelinux 2
redhat 2
amazon 2
redhatcve 7
prion 7
debiancve 7
cve 7
veracode 7
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : zziplib vulnerabilities (USN-3699-1)
2018-07-05 00:00:00
Debian DLA-2258-1 : zziplib security update
2020-06-29 00:00:00
openSUSE Security Update : zziplib (openSUSE-2018-215)
2018-02-28 00:00:00
openvas
openvas
Ubuntu Update for zziplib USN-3699-1
2018-07-04 00:00:00
Debian LTS: Security Advisory for zziplib (DLA-2258-1)
2020-06-29 00:00:00
Fedora Update for zziplib FEDORA-2018-45183aab17
2018-09-14 00:00:00
osv
osv
zziplib - security update
2020-06-28 00:00:00
CVE-2018-7725
2018-03-06 17:29:00
CVE-2018-7726
2018-03-06 17:29:00
debian
debian
[SECURITY] [DLA 2258-1] zziplib security update
2020-06-28 12:37:46
[SECURITY] [DLA 1287-1] zziplib security update
2018-02-20 22:37:55
fedora
fedora
[SECURITY] Fedora 27 Update: zziplib-0.13.69-1.fc27
2018-09-13 17:07:13
[SECURITY] Fedora 27 Update: zziplib-0.13.68-1.fc27
2018-02-20 17:20:57
[SECURITY] Fedora 27 Update: zziplib-0.13.67-1.fc27
2018-02-06 15:39:57
mageia
mageia
Updated zziplib packages fix security vulnerability
2019-02-21 01:18:01
ubuntucve
ubuntucve
CVE-2018-6869
2018-02-09 00:00:00
CVE-2018-6541
2018-02-02 00:00:00
CVE-2018-7725
2018-03-06 00:00:00
freebsd
freebsd
zziplib - multiple vulnerabilities
2017-03-01 00:00:00
centos
centos
zziplib security update
2018-11-15 18:54:23
zziplib security update
2019-08-30 04:38:06
archlinux
archlinux
[ASA-201804-3] zziplib: denial of service
2018-04-04 00:00:00
oraclelinux
oraclelinux
zziplib security update
2019-08-13 00:00:00
zziplib security update
2018-11-05 00:00:00
redhat
redhat
(RHSA-2018:3229) Low: zziplib security update
2018-10-30 04:32:25
(RHSA-2019:2196) Low: zziplib security update
2019-08-06 08:12:11
amazon
amazon
Low: zziplib
2019-01-07 22:02:00
Low: zziplib
2019-11-04 22:40:00
redhatcve
redhatcve
CVE-2018-6869
2018-02-09 15:49:21
CVE-2018-7726
2018-03-13 07:18:44
CVE-2018-7725
2018-03-13 06:48:54
prion
prion
Design/Logic Flaw
2018-02-09 06:29:00
Design/Logic Flaw
2018-03-06 17:29:00
Design/Logic Flaw
2018-03-06 17:29:00
debiancve
debiancve
CVE-2018-7726
2018-03-06 17:29:00
CVE-2018-7725
2018-03-06 17:29:00
CVE-2018-6869
2018-02-09 06:29:00
cve
cve
CVE-2018-6869
2018-02-09 06:29:00
CVE-2018-7726
2018-03-06 17:29:00
CVE-2018-7725
2018-03-06 17:29:00
veracode
veracode
Denial Of Service (DoS)
2018-02-12 06:02:29
Denial Of Service (DoS)
2018-03-07 05:08:56
Denial Of Service (DoS)
2018-03-07 03:27:15

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

76.6%

JSON
Related for USN-3699-1
nessus31openvas12osv9debian2fedora4mageia1ubuntucve7freebsd1centos2archlinux1oraclelinux2redhat2amazon2redhatcve7prion7debiancve7cve7veracode7