CVE-2020-18442: Debian Linux

Low severity, CVSS 3.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 34 only; version 35 only
• Gdraheim Zziplib: version 0.13.69 only

Published 2021-06-18. Last modified 2026-06-17.