The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2859 advisory.

  - Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return     value zzip_file_read in the function unzzip_cat_file. (CVE-2020-18442)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-081 advisory.

    Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return     value zzip_file_read in the function unzzip_cat_file. (CVE-2020-18442)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090376 advisory.

    Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return     value zzip_file_read in the function unzzip_cat_file.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2021_4316 advisory.

    * zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()     (CVE-2020-18442)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4316 advisory.

  - Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return     value zzip_file_read in the function unzzip_cat_file. (CVE-2020-18442)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-530a16ceb1 advisory.

    Automatic update for zziplib-0.13.72-1.fc37.

    ##### **Changelog**

    ```
    * Wed Feb  9 2022 Alexander Bokovoy <abokovoy@redhat.com> - 0.13.72-1
    - 0.13.72
    - Fixes CVE-2020-18442
    - Resolves: rhbz#1973831
    - Switch build to CMake, drop 32-bit patches as checks integrated in CMake already

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
156335	Debian DLA-2859-1 : zziplib - LTS security update	Nessus	Debian Local Security Checks	2021/12/28	2023/11/21	low
164697	Amazon Linux 2022 : zziplib, zziplib-devel, zziplib-utils (ALAS2022-2022-081)	Nessus	Amazon Linux Local Security Checks	2022/9/6	2024/12/11	low
345488	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: zziplib (UTSA-2026-090376)	Nessus	Unity Linux Local Security Checks	2026/9/13	2026/9/13	low
357712	Rocky Linux 8 [CIQ] Security Update: zziplib / zziplib-debuginfo / zziplib-debugsource / zziplib-devel / etc (crlsa-2021_4316)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	low
157725	AlmaLinux 8 : zziplib (ALSA-2021:4316)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	low
211198	Fedora 37 : zziplib (2022-530a16ceb1)	Nessus	Fedora Local Security Checks	2024/11/14	2024/11/14	low

检测

插件搜索

low

low

low

low

low

low