CVE-2018-6542
Fixed in a distro release EPSS 1%
In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
Products: gdraheim zziplib
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | zziplib | 0.13.68-1 |
| Debian 12 | zziplib | no fix |
| Debian 13 | zziplib | no fix |
| Debian 14 | zziplib | no fix |
| SUSE Linux Enterprise Desktop 12 SP3 | zziplib | 0.13.67-10.11.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | zziplib | 0.13.67-10.11.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | zziplib | 0.13.67-10.11.1 |
| openSUSE Tumbleweed | zziplib | 0.13.72-1.4 |