Memory corruption in ZZIPlib - CVE-2018-6541
Published: April 5, 2018
Vulnerability identifier: #VU11557
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-6541
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists in __zzip_fetch_disk_trailer in zzip/zip.c due to bus error caused by loading of a misaligned address when handling disk64_trailer local entries. A remote attacker can submit a specially crafted zip file, trigger memory corruption and cause the service to crash.
The weakness exists in __zzip_fetch_disk_trailer in zzip/zip.c due to bus error caused by loading of a misaligned address when handling disk64_trailer local entries. A remote attacker can submit a specially crafted zip file, trigger memory corruption and cause the service to crash.
Affected software
ZZIPlib
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Fedora
zziplib
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Fedora
zziplib
How to mitigate CVE-2018-6541
Update to version 0.13.68.
zziplib - update to 0.13.69-1.fc28