zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fixed in 1.8-pre2.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result     in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the     victim openning a crafted compressed file. This vulnerability appears to have been fixed in 1.8-pre2.
    (CVE-2018-1000637)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for zutils to version 1.7 fixes one security issue :

  - CVE-2018-1000637: buffer overrun in zcat utility     (boo#1103878)

Please note that the zutils zcat utility is distinct from the default gzip zcat utility.

zutils version prior to version 1.8-pre2 contains a buffer overflow vulnerability in zcat which happened with some input files when the '-v, --show-nonprinting' option was used (or indirectly enabled). This can result in potential denial of service or arbitrary code execution.
This attack appear is exploitable via the victim openning a crafted compressed file and has been fixed in 1.8-pre2.

For Debian 8 'Jessie', this problem has been fixed in version 1.3-4+deb8u1.

We recommend that you upgrade your zutils packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
256515	Linux Distros Unpatched Vulnerability : CVE-2018-1000637	Nessus	Misc.	high
123283	openSUSE Security Update : zutils (openSUSE-2019-654)	Nessus	SuSE Local Security Checks	high
117501	Debian DLA-1505-1 : zutils security update	Nessus	Debian Local Security Checks	high
112265	openSUSE Security Update : zutils (openSUSE-2018-951)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2018-1000637

high

Tenable Plugins

high

high

high

high