CVE:CVE-2018-6869
CNNVD:CNNVD-201802-352
ZZIPlib是一套轻量级的文件压缩工具。
ZZIPlib 0.13.68版本中的zzip/zip.c文件的‘__zzip_parse_root_directory’函数存在安全漏洞。远程攻击者可借助特制的zip文件利用该漏洞造成拒绝服务（不可控的内存分配和崩溃）。
solution:Upgrade zziplib_project zziplib to a higher version than 0.13.68,and avoid the version 0.13.68; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04