Bug 918624 (CVE-2020-18770)

Summary:	dev-libs/zziplib: invalid memory access
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	maintainer-needed
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [upstream]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-11-26 20:25:46 UTC

CVE-2020-18770 (https://github.com/gdraheim/zziplib/issues/69):

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

Upstream seemingly can't reproduce.