Back to Database
Status published
Medium
CVE-2018-7725
An issue was discovered in ZZIPlib 0.13.68. An invalid memory...
Vulnerability Description
An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-7725
Credits & Attribution
No credits recorded in the NVD database.
References
More from gdraheim
View All →CVE-2020-18770
An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in...
Medium
5.5
CVE-2020-18442
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause...
Low
3.3
CVE-2018-7727
An issue was discovered in ZZIPlib 0.13.68. There is a...
Medium
6.5
CVE-2018-7726
An issue was discovered in ZZIPlib 0.13.68. There is a...
Medium
6.5
CVE-2018-6869
In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and...
Medium
6.5
Affected Vendor
gdraheim
View all reports →Affected Software
zziplib, ubuntu linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Vulnerable Versions:
0.13.68, 14.04, 16.04, 17.10, 18.04, 7.0
Timeline
Official Publish:
March 6th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.