CVE-2018-6381: Canonical Ubuntu Linux

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file->stored data.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 17.10 only; version 18.04 only
• Gdraheim Zziplib: version 0.13.67 only

Published 2018-01-29. Last modified 2026-06-17.