{"id":"CVE-2018-7727","aliases":["DEBIAN-CVE-2018-7727","EUVD-2018-19442","GHSA-4g2g-r89f-8qqm","MGASA-2019-0093","RHSA-2018:3229","SUSE-SU-2019:3341-1","UBUNTU-CVE-2018-7727","USN-6298-1"],"status":"published","title":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function...","description":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01244,"percentile":0.6944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-772"],"published":"2018-03-06T17:00:00Z","modified":"2026-10-23T18:04:48Z","fixes":[{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zziplib","fixed_in":["0.13.62-3ubuntu0.16.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"zziplib","fixed_in":["0.13.62-3.1ubuntu0.18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"zziplib","fixed_in":["0.13.62-3.2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13.72+dfsg.1-1.1","0.13.72+dfsg.1-1.2","0.13.72+dfsg.1-1.2~exp1","0.13.72+dfsg.1-1.3","0.13.78+dfsg.1-0.1","0.13.78+dfsg.1-0.2"]},{"source":"osv","ecosystem":"Debian:13","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13.78+dfsg.1-0.1","0.13.78+dfsg.1-0.2"]},{"source":"osv","ecosystem":"Debian:14","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13.78+dfsg.1-0.1","0.13.78+dfsg.1-0.2"]},{"source":"osv","ecosystem":"Mageia:6","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.69-1.mga6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zziplib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zziplib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zziplib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zziplib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zziplib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zziplib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zziplib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zziplib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zziplib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zziplib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zziplib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zziplib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.62-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.67-10.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.67-10.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.67-10.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.67-10.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.67-10.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3ubuntu0.16.04.2+esm1"}]}],"versions":["0.13.62-3","0.13.62-3ubuntu0.16.04.1","0.13.62-3ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.1ubuntu0.18.04.1+esm1"}]}],"versions":["0.13.62-3.1","0.13.62-3.1ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.2ubuntu1.1"}]}],"versions":["0.13.62-3.2","0.13.62-3.2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3ubuntu0.16.04.2+esm1"}]}],"versions":["0.13.62-3","0.13.62-3ubuntu0.16.04.1","0.13.62-3ubuntu0.16.04.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.1ubuntu0.18.04.1+esm1"}]}],"versions":["0.13.62-3.1","0.13.62-3.1ubuntu0.18.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.2ubuntu1.1"}]}],"versions":["0.13.62-3.2","0.13.62-3.2ubuntu1"],"bundled":2}],"products":[{"vendor":"gdraheim","product":"zziplib"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://github.com/gdraheim/zziplib/issues/40","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3229","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7727","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4g2g-r89f-8qqm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-7727","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0093.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22570","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/R5NI6QBHJA6ZI7AYP4BYGADTML3F2LNO/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/T5F2Q7GQYRYWHMTEF2OKBIHBBFV6SZBY/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/I6J523IVLVVPUEHRDYT54A5QOKM5XVTO/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/MKVLTCQZTM4IO2OP63CRKPLX6NQKLQ2O/","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16548","tags":["advisory"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-02/msg00110.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-06/msg00017.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-10/msg00130.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1554662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1554672","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1554676","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3229.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7725","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7726","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7727","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7727","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193341-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1084515","tags":["report"]},{"url":"https://bugzilla.suse.com/1107424","tags":["report"]},{"url":"https://bugzilla.suse.com/1129403","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7727","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-7727","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6298-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-18442","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-7727","description":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.","status":"published","published":"2018-03-06T17:00:00Z","modified":"2024-08-05T06:31:05.139Z","updated_at":"2026-11-02T14:35:09.908186Z"}],"euvd":[{"id":"EUVD-2018-19442","description":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.","status":"published","published":"2018-03-06T17:00:00Z","modified":"2024-08-05T06:31:05Z","updated_at":"2026-11-03T02:40:05.186892Z"}],"ghsa":[{"id":"GHSA-4g2g-r89f-8qqm","title":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function...","description":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.","status":"published","published":"2022-05-13T01:53:23Z","modified":"2023-02-02T05:02:25Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-772"],"updated_at":"2026-11-02T14:51:26.066709Z"}],"nvd":[{"id":"CVE-2018-7727","description":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.","status":"published","published":"2018-03-06T17:29:00.59Z","modified":"2026-06-17T02:03:36.18Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-772"],"updated_at":"2026-11-02T14:04:23.783914Z"}],"osv":[{"id":"CVE-2018-7727","description":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.","status":"published","published":"2018-03-06T17:29:00.59Z","modified":"2026-10-20T10:50:30.421698409Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:09.74357Z"},{"id":"DEBIAN-CVE-2018-7727","description":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.","status":"published","published":"2018-03-06T17:29:00.59Z","modified":"2026-10-23T18:04:48.291978104Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"RHSA-2018:3229","title":"Red Hat Security Advisory: zziplib security update","status":"published","published":"2024-09-16T01:37:23Z","modified":"2026-06-26T10:39:34Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-7727","description":"An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.","status":"published","published":"2018-03-06T17:29:00Z","modified":"2026-04-22T12:04:24.755155Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"MGASA-2019-0093","title":"Updated zziplib packages fix security vulnerability","description":"In ZZIPlib 0.13.67, there is a segmentation fault caused by invalid memory\naccess in the zzip_disk_fread function (zzip/mmapped.c) because the size\nvariable is not validated against the amount of file-\u003estored data\n(CVE-2018-6381).\n\nAn unaligned memory access bug was found in the way ZZIPlib handled ZIP files.\nThis flaw could potentially be used to crash the application using ZZIPlib by\ntricking the application into processing specially crafted ZIP files\n(CVE-2018-6484).\n\nIn ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned\naddress in the zzip_disk_findfirst function of zzip/mmapped.c. Remote\nattackers could leverage this vulnerability to cause a denial of service via a\ncrafted zip file (CVE-2018-6540).\n\nA flaw was found in ZZIPlib 0.13.67, there is a bus error caused by loading of\na misaligned address (when handling disk64_trailer local entries) in\n__zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this\nvulnerability to cause a denial of service via a crafted zip file\n(CVE-2018-6541).\n\nIn ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek\nvalue) caused by loading of a misaligned address in the zzip_disk_findfirst\nfunction of zzip/mmapped.c (CVE-2018-6542).\n\nAn uncontrolled memory allocation was found in ZZIPlib that could lead to a\ncrash in the __zzip_parse_root_directory function of zzip/zip.c if the package\nis compiled with Address Sanitizer. Remote attackers could leverage this\nvulnerability to cause a denial of service via a crafted zip file\n(CVE-2018-6869).\n\nAn out of bounds read was found in function zzip_disk_fread of ZZIPlib, up to\n0.13.68, when ZZIPlib mem_disk functionality is used. Remote attackers could\nleverage this vulnerability to cause a denial of service via a crafted zip\nfile (CVE-2018-7725).\n\nAn improper input validation was found in function __zzip_fetch_disk_trailer\nof ZZIPlib, up to 0.13.68, that could lead to a crash in\n__zzip_parse_root_directory function of zzip/zip.c. Remote attackers could\nleverage this vulnerability to cause a denial of service via a crafted zip\nfile (CVE-2018-7726).\n\nA memory leak was found in unzip-mem.c and unzzip-mem.c of ZZIPlib, up to\nv0.13.68, that could lead to resource exhaustion. Local attackers could\nleverage this vulnerability to cause a denial of service via a crafted zip\nfile (CVE-2018-7727).\n\nAn issue was discovered in ZZIPlib through 0.13.69. There is a memory leak\ntriggered in the function __zzip_parse_root_directory in zip.c, which could\nlead to a denial of service attack (CVE-2018-16548).\n\nA flaw was found in ZZIPlib 0.13.69. A directory traversal vulnerability\nallows attackers to overwrite arbitrary files via a .. (dot dot) in a zip\nfile, because of the function unzzip_cat in the bins/unzzipcat-mem.c file\n(CVE-2018-17828).\n","status":"published","published":"2019-02-20T22:18:01Z","modified":"2026-04-16T04:41:25.353199312Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-SU-2019:3341-1","title":"Security update for zziplib","description":"This update for zziplib fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-16548: Avoid a memory leak from __zzip_parse_root_directory() which could lead to denial of service. (bsc#1107424)\n- CVE-2018-7727: Fixed a memory leak in unzzip_cat() (bsc#1084515).\n\nNon-security issue fixed:\n\n- Prevented division by zero by first checking if uncompressed size\n  is 0. This may happen with directories which have a compressed\n  and uncompressed size of 0. (bsc#1129403)\n","status":"published","published":"2019-12-19T07:26:43Z","modified":"2026-02-04T02:39:26.921574Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-6298-1","title":"zziplib vulnerabilities","description":"Liu Zhu discovered that ZZIPlib incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2018-7727)\n\nYiMing Liu discovered that ZZIPlib incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2020-18442)\n","status":"published","published":"2023-08-17T14:42:29Z","modified":"2026-06-25T13:32:16.095072082Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}