Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value “zzip_file_read” in the function “unzzip_cat_file”.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18442
Reference (s):
- FEDORA:FEDORA-2022-737e44718a
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VVANTEBDQGOIPC5KCEVAGA5KT4KKTGWB/
- FEDORA:FEDORA-2022-8109b472a3
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCFYD46OY4VAGJ4UX7IFOH5SHD4UW4ZA/
- https://github.com/gdraheim/zziplib/issues/68