{"id":"CVE-2020-18442","aliases":["ALSA-2021:4316","DEBIAN-CVE-2020-18442","DLA-2859-1","EUVD-2020-10366","GHSA-g2w2-2g9v-p7fp","MGASA-2021-0359","OESA-2021-1247","RHSA-2021:4316","RLSA-2021:4316","SUSE-SU-2021:2164-1","SUSE-SU-2024:0970-1","UBUNTU-CVE-2020-18442","USN-6298-1"],"status":"published","title":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the...","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00745,"percentile":0.55118,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2021-06-18T14:25:51Z","modified":"2026-10-29T11:01:01Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"zziplib","fixed_in":["0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"zziplib-devel","fixed_in":["0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"zziplib-utils","fixed_in":["0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"zziplib","fixed_in":["0.13.72+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"zziplib","fixed_in":["0.13.72+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"zziplib","fixed_in":["0.13.72+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"zziplib","fixed_in":["0.13.62-3.2~deb9u2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"zziplib","fixed_in":["0.13.72-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"zziplib","fixed_in":["0.13.69-8.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib-debuginfo","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib-debugsource","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib-utils","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib-utils-debuginfo","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zziplib-debuginfo","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zziplib-debugsource","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zziplib-devel","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zziplib-utils-debuginfo","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"zziplib","fixed_in":["0:0.13.68-9.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"zziplib","fixed_in":["0.13.67-10.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"zziplib","fixed_in":["0.13.67-10.33.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zziplib","fixed_in":["0.13.62-3ubuntu0.16.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"zziplib","fixed_in":["0.13.62-3.1ubuntu0.18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"zziplib","fixed_in":["0.13.62-3.2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"zziplib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"zziplib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.72+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.72+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.72+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.2~deb9u2"}]}],"versions":["0.13.62-3.1","0.13.62-3.2~deb9u1"]},{"source":"osv","ecosystem":"Mageia:8","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.72-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.69-8.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zziplib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zziplib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zziplib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zziplib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zziplib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.68-9.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.67-10.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.67-10.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.69-150000.3.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-TERADATA","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.69-150000.3.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.69-150000.3.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3ubuntu0.16.04.2+esm1"}]}],"versions":["0.13.62-3","0.13.62-3ubuntu0.16.04.1","0.13.62-3ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.1ubuntu0.18.04.1+esm1"}]}],"versions":["0.13.62-3.1","0.13.62-3.1ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.2ubuntu1.1"}]}],"versions":["0.13.62-3.2","0.13.62-3.2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3ubuntu0.16.04.2+esm1"}]}],"versions":["0.13.62-3","0.13.62-3ubuntu0.16.04.1","0.13.62-3ubuntu0.16.04.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.1ubuntu0.18.04.1+esm1"}]}],"versions":["0.13.62-3.1","0.13.62-3.1ubuntu0.18.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zziplib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.62-3.2ubuntu1.1"}]}],"versions":["0.13.62-3.2","0.13.62-3.2ubuntu1"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gdraheim","product":"zziplib"}],"references":[{"url":"https://github.com/gdraheim/zziplib/issues/68","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00021.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCFYD46OY4VAGJ4UX7IFOH5SHD4UW4ZA/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVANTEBDQGOIPC5KCEVAGA5KT4KKTGWB/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-18442","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCFYD46OY4VAGJ4UX7IFOH5SHD4UW4ZA"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVANTEBDQGOIPC5KCEVAGA5KT4KKTGWB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCFYD46OY4VAGJ4UX7IFOH5SHD4UW4ZA"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VVANTEBDQGOIPC5KCEVAGA5KT4KKTGWB"},{"url":"https://github.com/advisories/GHSA-g2w2-2g9v-p7fp"},{"url":"https://errata.almalinux.org/8/ALSA-2021-4316.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-18442","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-18442","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0359.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29178","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-June/009090.html","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1247","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4316","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973826","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4316.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-18442","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-18442","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4316","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212164-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187526","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-18442","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240970-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1154002","tags":["report"]},{"url":"https://bugzilla.suse.com/1214577","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-18770","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-18442","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6298-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-7727","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-18442","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".","status":"published","published":"2021-06-18T14:25:51Z","modified":"2024-08-04T14:00:49.282Z","updated_at":"2026-11-02T14:35:59.434367Z"}],"euvd":[{"id":"EUVD-2020-10366","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".","status":"published","published":"2021-06-18T14:25:51Z","modified":"2024-08-04T14:00:49Z","updated_at":"2026-11-03T03:07:26.397496Z"}],"ghsa":[{"id":"GHSA-g2w2-2g9v-p7fp","title":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the...","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".","status":"published","published":"2022-05-24T19:05:39Z","modified":"2025-07-10T18:32:11Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:02:58.788337Z"}],"nvd":[{"id":"CVE-2020-18442","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".","status":"published","published":"2021-06-18T15:15:08.227Z","modified":"2026-06-17T02:59:19.33Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:06:43.288951Z"}],"osv":[{"id":"CVE-2020-18442","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".","status":"published","published":"2021-06-18T15:15:08.227Z","modified":"2026-10-20T10:49:56.391779444Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:15.212689Z"},{"id":"DEBIAN-CVE-2020-18442","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".","status":"published","published":"2021-06-18T15:15:08.227Z","modified":"2026-10-26T12:02:29.090170677Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"OESA-2021-1247","title":"zziplib security update","description":"The zziplib is a lightweight library to easily extract data from zip files. Applications can bundle files into a single zip archive and access them. The implementation is based only on the (free) subset of compression with the zlib algorithm which is actually used by the zip/unzip tools.\r\n\r\nSecurity Fix(es):\r\n\r\nInfinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \u0026quot;zzip_file_read\u0026quot; in the function \u0026quot;unzzip_cat_file\u0026quot;.(CVE-2020-18442)","status":"published","published":"2021-07-03T11:04:29Z","modified":"2026-08-18T01:15:44.540136217Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4316","title":"Red Hat Security Advisory: zziplib security update","status":"published","published":"2024-09-16T06:14:34Z","modified":"2026-06-26T12:21:16.463852736Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4316","title":"Low: zziplib security update","description":"The zziplib is a lightweight library to easily extract data from zip files.\n\nSecurity Fix(es):\n\n* zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file() (CVE-2020-18442)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:59:11Z","modified":"2026-02-04T09:30:11.705112Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-18442","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".","status":"published","published":"2021-06-18T15:15:00Z","modified":"2026-04-22T12:31:39.797053Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"ALSA-2021:4316","title":"Low: zziplib security update","description":"The zziplib is a lightweight library to easily extract data from zip files.\n\nSecurity Fix(es):\n\n* zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file() (CVE-2020-18442)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:59:11Z","modified":"2026-10-29T11:01:01.915947879Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2859-1","title":"zziplib - security update","status":"published","published":"2021-12-28T00:00:00Z","modified":"2026-03-09T01:18:54.440175Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2021-0359","title":"Updated zziplib packages fix security vulnerability","description":"Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of\nservice via the return value \"zzip_file_read\" in the function\n\"unzzip_cat_file\" (CVE-2020-18442).\n","status":"published","published":"2021-07-20T10:46:47Z","modified":"2026-04-16T04:43:17.574403137Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"SUSE-SU-2021:2164-1","title":"Security update for zziplib","description":"This update for zziplib fixes the following issues:\n\n- CVE-2020-18442: Fixed infinite loop in zzip_file_read() as used in unzzip_cat_file() (bsc#1187526).\n","status":"published","published":"2021-06-25T16:04:04Z","modified":"2025-05-02T04:10:00.781452Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2024:0970-1","title":"Security update for zziplib","description":"This update for zziplib fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2020-18442: Fixed infinite loop in zzip_file_read() as used in unzzip_cat_file() (bsc#1187526).\n- CVE-2020-18770: Fixed denial-of-service in function zzip_disk_entry_to_file_header in mmapped.c (bsc#1214577).\n\nNon-security issue fixed:\n\n- Implement an error message with a condition by checking the return value of a function call. (bsc#1154002)\n","status":"published","published":"2024-03-22T08:10:48Z","modified":"2026-02-04T03:33:05.955479Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-6298-1","title":"zziplib vulnerabilities","description":"Liu Zhu discovered that ZZIPlib incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2018-7727)\n\nYiMing Liu discovered that ZZIPlib incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2020-18442)\n","status":"published","published":"2023-08-17T14:42:29Z","modified":"2026-06-25T13:32:16.095072082Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}