CVE-2018-7725: Buffer Overflow
An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzipdiskfread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.
Other sources
ZZIPlib through version 0.13.68 is vulnerable to an out of bound read in mapped.c:zzipdiskfread(). An attacker could exploit this via a crafted zip file, opened with the ZZIPlib memdisk functionality, causing a denial of service or possibly leaking memory data.
Upstream Issue: https://github.com/gdraheim/zziplib/issues/39
Upstream patches: https://github.com/gdraheim/zziplib/commit/1ba660b3300d67b8ce9f6b96bbae0b36fa2d6b06
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/zziplibto a version that resolves this vulnerability.Fixed in 0.13.69 - Upgrade
Upgrade
debian/zziplibto a version that resolves this vulnerability.Fixed in 0.13.62-3.3+deb11u1Fixed in 0.13.72+dfsg.1-1.1Fixed in 0.13.72+dfsg.1-1.2Fixed in 0.13.72+dfsg.1-1.3 - Upgrade
Upgrade
zziplibto a version that resolves this vulnerability.Fixed in 0.13.68Patch https://github.com/gdraheim/zziplib/commit/1ba660b3300d67b8ce9f6b96bbae0b36fa2d6b06 - Compensating control
If you use ZZIPlib mem_disk functionality, disable or avoid using it for opening untrusted ZIP files to prevent triggering the out of bound read in mapped.c:zzip_disk_fread().
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7725?
CVE-2018-7725 is categorized as a denial of service vulnerability due to an application crash.
How do I fix CVE-2018-7725?
To remediate CVE-2018-7725, update ZZIPlib to version 0.13.69 or later.
Which versions of ZZIPlib are affected by CVE-2018-7725?
ZZIPlib versions before 0.13.69 are vulnerable to CVE-2018-7725, specifically version 0.13.68.
What vulnerability does CVE-2018-7725 exploit?
CVE-2018-7725 exploits an invalid memory address dereference in the zzip_disk_fread function.
What platforms are affected by CVE-2018-7725?
CVE-2018-7725 affects multiple platforms including Red Hat Enterprise Linux and various Ubuntu versions.