Lucene search
Veracode Vulnerability DatabaseVERACODE:43716HistoryOct 10, 2023 - 8:59 a.m.
Denial Of Service (DoS)
2023-10-1008:59:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
denial of service
zziplib
memory access
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
12.8%
zziplib is vulnerable to Denial Of Service. The vulnerability is due to zzip_disk_entry_to_file_header function in mmapped.c caused by an invalid memory access which will leads to a denial-of-service.
References
Related
oraclelinux
oraclelinux
zziplib security update
2024-05-02 00:00:00
zziplib security update
2024-05-23 00:00:00
nessus
nessus
RHEL 8 : zziplib (RHSA-2024:3127)
2024-05-23 00:00:00
Oracle Linux 8 : zziplib (ELSA-2024-3127)
2024-05-28 00:00:00
Oracle Linux 9 : zziplib (ELSA-2024-2377)
2024-05-06 00:00:00
nvd
nvd
CVE-2020-18770
2023-08-22 19:15:55
redhat
redhat
(RHSA-2024:2377) Moderate: zziplib security update
2024-04-30 06:15:32
(RHSA-2024:3127) Moderate: zziplib security update
2024-05-22 06:35:41
mageia
mageia
Updated zziplib packages fix security vulnerability
2024-05-09 05:40:29
cvelist
cvelist
CVE-2020-18770
2023-08-22 00:00:00
osv
osv
Moderate: zziplib security update
2024-05-22 00:00:00
CVE-2020-18770
2023-08-22 19:15:55
Moderate: zziplib security update
2024-04-30 00:00:00
almalinux
almalinux
Moderate: zziplib security update
2024-05-22 00:00:00
Moderate: zziplib security update
2024-04-30 00:00:00
prion
prion
Denial of service
2023-08-22 19:15:00
cve
cve
CVE-2020-18770
2023-08-22 19:15:55
ubuntucve
ubuntucve
CVE-2020-18770
2023-08-22 00:00:00
debiancve
debiancve
CVE-2020-18770
2023-08-22 19:15:55
redhatcve
redhatcve
CVE-2020-18770
2023-10-30 05:56:53
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0167)
2024-05-09 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
12.8%
Related for VERACODE:43716