CVE:CVE-2018-7726
CNNVD:CNNVD-201803-167
ZZIPlib是一套轻量级的文件压缩工具。
ZZIPlib 0.13.68版本中的zip.c文件的‘__zzip_parse_root_directory’函数存在安全漏洞。攻击者可借助特制的zip文件利用该漏洞造成拒绝服务。
solution:Upgrade zziplib_project zziplib to a higher version than 0.13.68,and avoid the version 0.13.68; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0