CVE-2018-6484

Name of the Vulnerable Software and Affected Versions: ZZIPlib version 0.13.67

Description: The issue is related to insufficient input validation in the zzip fetch disk trailer function of the ZZIPlib archiving library. This can be exploited by a remote attacker using a specially crafted zip file, potentially leading to a denial of service. The vulnerability is caused by a memory alignment error and bus error in the zzip fetch disk trailer function.

Recommendations: For ZZIPlib version 0.13.67, consider disabling the zzip fetch disk trailer function as a temporary workaround until a patch is available. Restrict access to zip files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.