VYPR
← All advisories
Medium severity6.5OSV Advisory· Published Feb 9, 2018· Updated Jun 17, 2026

CVE-2018-6869

CVE-2018-6869

Description

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Gdraheim/ZziplibOSV2 versions
    v0.13.36, v0.13.48, v0.13.50, …+ 1 more
    • (no CPE)range: v0.13.36, v0.13.48, v0.13.50, …
    • cpe:2.3:a:gdraheim:zziplib:0.13.68:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
  • Zziplib/Zziplibllm-fuzzy
    Range: = 0.13.68

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.