CVE-2018-16548

Name of the Vulnerable Software and Affected Versions: ZZIPlib versions prior to 0.13.70

Description: The issue is related to a memory leak in the zzip parse root directory function, which can lead to a denial of service attack. This is caused by a resource not being released after its valid lifetime has expired. A remote attacker can exploit this issue to cause a denial of service.

Recommendations: For ZZIPlib versions prior to 0.13.70, update to version 0.13.70 or later to resolve the issue. As a temporary workaround, consider restricting access to the zzip parse root directory function in zip.c to minimize the risk of exploitation.