Bug 1187526 (CVE-2020-18442) - VUL-0: CVE-2020-18442: zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()
Summary: VUL-0: CVE-2020-18442: zziplib: infinite loop via the return value of zzip_fi...
Status: RESOLVED FIXED
Alias: CVE-2020-18442
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/302554/
Whiteboard: CVSSv3.1:SUSE:CVE-2020-18442:4.0:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2021-06-21 05:21 UTC by Gianluca Gabrielli
Modified: 2024-05-10 17:59 UTC (History)
3 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Gianluca Gabrielli 2021-06-21 05:21:15 UTC 
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

Reference:
https://github.com/gdraheim/zziplib/issues/68

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1973826
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18442
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18442
https://github.com/gdraheim/zziplib/issues/68
http://www.cvedetails.com/cve/CVE-2020-18442/
Comment 1 Gianluca Gabrielli 2021-06-21 05:27:29 UTC 
Affected packages:
 - SUSE:SLE-12:Update/zziplib      0.13.67
 - SUSE:SLE-15:Update/zziplib      0.13.69

All the commits from this GH issue [0] should be backported in order to fix this vulnerability. openSUSE:Factory/zziplib is already fixed.

[0] https://github.com/gdraheim/zziplib/issues/68
Comment 2 Josef Möllers 2021-06-21 10:12:00 UTC 
SUSE:SLE-12:Update/zziplib - https://build.suse.de/request/show/243469
SUSE:SLE-15:Update/zziplib - https://build.suse.de/request/show/243470
Comment 3 Josef Möllers 2021-06-21 14:23:06 UTC 
Sorry ... I forgot to mention the CVE-# in the changes file:
SUSE:SLE-12:Update - https://build.suse.de/request/show/243488
SUSE:SLE-15:Update - https://build.suse.de/request/show/243489
Comment 4 Swamp Workflow Management 2021-06-25 19:15:59 UTC 
SUSE-SU-2021:2164-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 1187526
CVE References: CVE-2020-18442
JIRA References: 
Sources used:
SUSE Linux Enterprise Workstation Extension 12-SP5 (src):    zziplib-0.13.67-10.33.1
SUSE Linux Enterprise Software Development Kit 12-SP5 (src):    zziplib-0.13.67-10.33.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 6 Maintenance Automation 2024-03-22 12:30:35 UTC 
SUSE-SU-2024:0970-1: An update that solves two vulnerabilities and has one security fix can now be installed.

Category: security (moderate)
Bug References: 1154002, 1187526, 1214577
CVE References: CVE-2020-18442, CVE-2020-18770
Maintenance Incident: [SUSE:Maintenance:13903](https://smelt.suse.de/incident/13903/)
Sources used:
openSUSE Leap 15.5 (src):
 zziplib-0.13.69-150000.3.17.1
Basesystem Module 15-SP5 (src):
 zziplib-0.13.69-150000.3.17.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 7 Olaf Hering 2024-03-30 13:01:27 UTC 
This released update broke pkgs which depend on zziplib:

have choice for pkgconfig(zziplib): zziplib-devel zziplib-devel-32bit