CVE:CVE-2020-18442
CNNVD:CNNVD-202106-1422
ZZIPlib是一款压缩文档提取库。
zziplib 存在安全漏洞，该漏洞源于zziplib v0.13.69中的无限循环。攻击者可利用该漏洞通过函数“unzzip cat file”中的返回值“zzip file read”导致拒绝服务。
solution:Upgrade zziplib_project zziplib to a higher version than 0.13.69,and avoid the version 0.13.69; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35