The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has zziplib packages installed that are affected by multiple vulnerabilities:

  - In ZZIPlib 0.13.67, there is a bus error caused by     loading of a misaligned address (when handling     disk64_trailer local entries) in
    __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers     could leverage this vulnerability to cause a denial of     service via a crafted zip file. (CVE-2018-6541)

  - An issue was discovered in ZZIPlib through 0.13.69.
    There is a memory leak triggered in the function
    __zzip_parse_root_directory in zip.c, which will lead to     a denial of service attack. (CVE-2018-16548)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several issues have been fixed in zziplib, a library providing read access on ZIP-archives. They are basically all related to invalid memory access and resulting crash or memory leak.

For Debian 8 'Jessie', these problems have been fixed in version 0.13.62-3+deb8u2.

We recommend that you upgrade your zziplib packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for zziplib fixes the following issues :

Security issue fixed :

  - CVE-2018-16548: Prevented memory leak from
    __zzip_parse_root_directory(). Free allocated structure     if its address is not passed back. (bsc#1107424)

Other issue addressed :

  - Prevented a division by zero (bsc#1129403). This update     was imported from the SUSE:SLE-15:Update update project.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2196 advisory.

    The zziplib is a lightweight library to easily extract data from zip files.

    Security Fix(es):

    * zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c (CVE-2018-6541)

    * zziplib: Memory leak triggered in the function __zzip_parse_root_directory in zip.c (CVE-2018-16548)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in ZZIPlib through 0.13.69.
    There is a memory leak triggered in the function
    __zzip_parse_root_directory in zip.c, which will lead     to a denial of service attack.(CVE-2018-16548)

  - Heap-based buffer overflow in the __zzip_get32 function     in fetch.c in zziplib 0.13.62 allows remote attackers     to cause a denial of service (crash) via a crafted ZIP     file.(CVE-2017-5974)

  - Heap-based buffer overflow in the __zzip_get64 function     in fetch.c in zziplib 0.13.62 allows remote attackers     to cause a denial of service (crash) via a crafted ZIP     file.(CVE-2017-5975)

  - Heap-based buffer overflow in the     zzip_mem_entry_extra_block function in memdisk.c in     zziplib 0.13.62 allows remote attackers to cause a     denial of service (crash) via a crafted ZIP     file.(CVE-2017-5976)

  - In ZZIPlib 0.13.67, there is a bus error caused by     loading of a misaligned address (when handling     disk64_trailer local entries) in
    __zzip_fetch_disk_trailer (zzip/zip.c). Remote     attackers could leverage this vulnerability to cause a     denial of service via a crafted zip     file.(CVE-2018-6541)

  - In ZZIPlib 0.13.67, there is a bus error caused by     loading of a misaligned address in the     zzip_disk_findfirst function of zzip/mmapped.c. Remote     attackers could leverage this vulnerability to cause a     denial of service via a crafted zip     file.(CVE-2018-6540)

  - In ZZIPlib 0.13.67, there is a memory alignment error     and bus error in the __zzip_fetch_disk_trailer function     of zzip/zip.c. Remote attackers could leverage this     vulnerability to cause a denial of service via a     crafted zip file.(CVE-2018-6484)

  - In ZZIPlib 0.13.67, there is a segmentation fault     caused by invalid memory access in the zzip_disk_fread     function (zzip/mmapped.c) because the size variable is     not validated against the amount of file->stored     data.(CVE-2018-6381)

  - In ZZIPlib 0.13.68, there is an uncontrolled memory     allocation and a crash in the
    __zzip_parse_root_directory function of zzip/zip.c.
    Remote attackers could leverage this vulnerability to     cause a denial of service via a crafted zip     file.(CVE-2018-6869)

  - seeko.c in zziplib 0.13.62 allows remote attackers to     cause a denial of service (assertion failure and crash)     via a crafted ZIP file.(CVE-2017-5981)

  - The prescan_entry function in fseeko.c in zziplib     0.13.62 allows remote attackers to cause a denial of     service (NULL pointer dereference and crash) via a     crafted ZIP file.(CVE-2017-5979)

  - The zzip_mem_entry_extra_block function in memdisk.c in     zziplib 0.13.62 allows remote attackers to cause a     denial of service (invalid memory read and crash) via a     crafted ZIP file.(CVE-2017-5977)

  - The zzip_mem_entry_new function in memdisk.c in zziplib     0.13.62 allows remote attackers to cause a denial of     service (out-of-bounds read and crash) via a crafted     ZIP file.(CVE-2017-5978)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
129933	NewStart CGSL CORE 5.04 / MAIN 5.04 : zziplib Multiple Vulnerabilities (NS-SA-2019-0184)	Nessus	NewStart CGSL Local Security Checks	2019/10/15	2024/4/18	medium
137861	Debian DLA-2258-1 : zziplib security update	Nessus	Debian Local Security Checks	2020/6/29	2024/3/5	medium
130355	openSUSE Security Update : zziplib (openSUSE-2019-2394)	Nessus	SuSE Local Security Checks	2019/10/29	2024/4/16	medium
127695	RHEL 7 : zziplib (RHSA-2019:2196)	Nessus	Red Hat Local Security Checks	2019/8/12	2024/11/6	medium
132220	EulerOS 2.0 SP3 : zziplib (EulerOS-SA-2019-2685)	Nessus	Huawei Local Security Checks	2019/12/18	2024/4/3	medium

检测

插件搜索

medium

medium

medium

medium

medium