CVE-2018-7725

Impact:
Low
Public Date:
2018-02-07
CWE:
CWE-125
Bugzilla:
1554662: CVE-2018-7725 zziplib: out of bound read in mmapped.c:zzip_disk_fread() causes crash
An out of bounds read was found in function zzip_disk_fread of ZZIPlib, up to 0.13.68, when ZZIPlib mem_disk functionality is used. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

Find out more about CVE-2018-7725 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v3 metrics

CVSS3 Base Score 5.4
CVSS3 Base Metrics CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality Low
Integrity Impact None
Availability Impact Low

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 7 (zziplib) RHSA-2018:3229 2018-10-30

Affected Packages State

Platform Package State
Red Hat Enterprise Linux 8 zziplib Not affected
Last Modified