A vulnerability classified as problematic has been found in ZZIPlib 0.13.67. Affected is the function __zzip_fetch_disk_trailer of the file zzip/zip.c of the component ZIP File Handler. The manipulation with an unknown input leads to a resource management vulnerability. CWE is classifying the issue as CWE-399. This is going to have an impact on availability. CVE summarizes:

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

The bug was discovered 02/02/2018. The weakness was published 02/02/2018 (Website). The advisory is available at github.com. This vulnerability is traded as CVE-2018-6541 since 02/02/2018. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 120292 (Fedora 28 : zziplib (2018-237e9b550c)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Fedora Local Security Checks and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 197187 (Ubuntu Security Notification for Zziplib Vulnerabilities (USN-3699-1)).

Upgrading eliminates this vulnerability. A possible mitigation has been published 7 months after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (120292). Similar entry is available at VDB-113123.

Productinfo

Name

• ZZIPlib

Version

• 0.13.67

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion