In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-02-02T09:00:00

Updated: 2024-08-05T06:10:10.159Z

Reserved: 2018-02-02T00:00:00

Link: CVE-2018-6541

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-02-02T09:29:00.537

Modified: 2024-11-21T04:10:51.917

Link: CVE-2018-6541

cve-icon Redhat

Severity : Low

Publid Date: 2018-02-01T00:00:00Z

Links: CVE-2018-6541 - Bugzilla