CVE:CVE-2018-7727
CNNVD:CNNVD-201803-166
ZZIPlib是一套轻量级的文件压缩工具。
ZZIPlib 0.13.68版本中的memdisk.c文件的‘zzip_mem_disk_new’函数存在内存泄露漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade zziplib_project zziplib to a higher version than 0.13.68,and avoid the version 0.13.68; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0