The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2196 advisory.

    The zziplib is a lightweight library to easily extract data from zip files.

    Security Fix(es):

    * zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c (CVE-2018-6541)

    * zziplib: Memory leak triggered in the function __zzip_parse_root_directory in zip.c (CVE-2018-16548)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for zziplib fixes the following issues :

Security issue fixed :

  - CVE-2018-16548: Prevented memory leak from
    __zzip_parse_root_directory(). Free allocated structure     if its address is not passed back. (bsc#1107424)

Other issue addressed :

  - Prevented a division by zero (bsc#1129403). This update     was imported from the SUSE:SLE-15:Update update project.

According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The zziplib is a lightweight library to easily extract     data from zip files.Security Fix(es):An issue was     discovered in ZZIPlib through 0.13.69. There is a     memory leak triggered in the function
    __zzip_parse_root_directory in zip.c, which will lead     to a denial of service attack.(CVE-2018-16548)In     ZZIPlib 0.13.67, there is a segmentation fault caused     by invalid memory access in the zzip_disk_fread     function (zzip/mmapped.c) because the size variable is     not validated against the amount of file->stored     data.(CVE-2018-6381)In ZZIPlib 0.13.67, there is a     memory alignment error and bus error in the
    __zzip_fetch_disk_trailer function of zzip/zip.c.
    Remote attackers could leverage this vulnerability to     cause a denial of service via a crafted zip     file.(CVE-2018-6484)In ZZIPlib 0.13.67, there is a bus     error caused by loading of a misaligned address in the     zzip_disk_findfirst function of zzip/mmapped.c. Remote     attackers could leverage this vulnerability to cause a     denial of service via a crafted zip     file.(CVE-2018-6540)In ZZIPlib 0.13.67, there is a bus     error caused by loading of a misaligned address (when     handling disk64_trailer local entries) in
    __zzip_fetch_disk_trailer (zzip/zip.c). Remote     attackers could leverage this vulnerability to cause a     denial of service via a crafted zip     file.(CVE-2018-6541)In ZZIPlib 0.13.68, there is an     uncontrolled memory allocation and a crash in the
    __zzip_parse_root_directory function of zzip/zip.c.
    Remote attackers could leverage this vulnerability to     cause a denial of service via a crafted zip     file.(CVE-2018-6869)The prescan_entry function in     fseeko.c in zziplib 0.13.62 allows remote attackers to     cause a denial of service (NULL pointer dereference and     crash) via a crafted ZIP file.(CVE-2017-5979)seeko.c in     zziplib 0.13.62 allows remote attackers to cause a     denial of service (assertion failure and crash) via a     crafted ZIP file.(CVE-2017-5981)The zzip_mem_entry_new     function in memdisk.c in zziplib 0.13.62 allows remote     attackers to cause a denial of service (out-of-bounds     read and crash) via a crafted ZIP     file.(CVE-2017-5978)Heap-based buffer overflow in the
    __zzip_get32 function in fetch.c in zziplib 0.13.62     allows remote attackers to cause a denial of service     (crash) via a crafted ZIP     file.(CVE-2017-5974)Heap-based buffer overflow in the     zzip_mem_entry_extra_block function in memdisk.c in     zziplib 0.13.62 allows remote attackers to cause a     denial of service (crash) via a crafted ZIP     file.(CVE-2017-5976)Heap-based buffer overflow in the
    __zzip_get64 function in fetch.c in zziplib 0.13.62     allows remote attackers to cause a denial of service     (crash) via a crafted ZIP file.(CVE-2017-5975)The     zzip_mem_entry_extra_block function in memdisk.c in     zziplib 0.13.62 allows remote attackers to cause a     denial of service (invalid memory read and crash) via a     crafted ZIP file.(CVE-2017-5977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function
    __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack. (CVE-2018-16548)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for zziplib fixes the following issues :

Security issues fixed :

CVE-2018-16548: Avoid a memory leak from __zzip_parse_root_directory() which could lead to denial of service. (bsc#1107424)

CVE-2018-7727: Fixed a memory leak in unzzip_cat() (bsc#1084515).

Non-security issue fixed: Prevented division by zero by first checking if uncompressed size is 0. This may happen with directories which have a compressed and uncompressed size of 0. (bsc#1129403)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
127695	RHEL 7 : zziplib (RHSA-2019:2196)	Nessus	Red Hat Local Security Checks	2019/8/12	2024/11/6	medium
130355	openSUSE Security Update : zziplib (openSUSE-2019-2394)	Nessus	SuSE Local Security Checks	2019/10/29	2024/4/16	medium
131631	EulerOS 2.0 SP2 : zziplib (EulerOS-SA-2019-2478)	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	medium
257975	Linux Distros Unpatched Vulnerability : CVE-2018-16548	Nessus	Misc.	2025/8/27	2026/9/2	medium
132335	SUSE SLED12 Security Update : zziplib (SUSE-SU-2019:3341-1)	Nessus	SuSE Local Security Checks	2019/12/20	2024/4/2	medium

検出

プラグインの検索

medium

medium

medium

medium

medium