CVE-2018-6540 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-6540 Interim 1 33 2025-08-14T02:40:55Z current 2021-05-30T14:10:44Z 2025-08-14T02:40:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-6540 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-February/003754.html E-Mail link for SUSE-SU-2018:0548-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Tumbleweed libzzip-0-13 libzzip-0-13-0.13.67-10.14.1 libzzip-0-13-0.13.67-10.5.1 libzzip-0-13-0.13.69-1.13 libzzip-0-13-0.13.69-3.10.1 libzzip-0-13-0.13.69-3.3.1 libzzip-0-13-0.13.72-1.4 libzzip-0-13-0.13.72-150600.2.2 libzzip-0-13-0.13.78-150700.1.5 libzzip-0-13-32bit-0.13.72-1.4 zziplib zziplib-devel zziplib-devel-0.13.67-10.14.1 zziplib-devel-0.13.67-10.5.1 zziplib-devel-0.13.69-1.13 zziplib-devel-0.13.69-3.10.1 zziplib-devel-0.13.69-3.3.1 zziplib-devel-0.13.72-1.4 zziplib-devel-0.13.72-150600.2.2 zziplib-devel-0.13.78-150700.1.5 zziplib-devel-32bit-0.13.72-1.4 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libzzip-0-13-0.13.67-10.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libzzip-0-13-0.13.69-1.13 as a component of SUSE Linux Enterprise Module for Basesystem 15 zziplib-devel-0.13.69-1.13 as a component of SUSE Linux Enterprise Module for Basesystem 15 libzzip-0-13-0.13.69-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 zziplib-devel-0.13.69-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libzzip-0-13-0.13.69-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 zziplib-devel-0.13.69-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libzzip-0-13-0.13.69-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 zziplib-devel-0.13.69-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libzzip-0-13-0.13.69-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 zziplib-devel-0.13.69-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libzzip-0-13-0.13.69-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 zziplib-devel-0.13.69-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libzzip-0-13-0.13.72-150600.2.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 zziplib-devel-0.13.72-150600.2.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libzzip-0-13-0.13.78-150700.1.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 zziplib-devel-0.13.78-150700.1.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 zziplib-devel-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 zziplib-devel-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libzzip-0-13-0.13.67-10.14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 zziplib-devel-0.13.67-10.14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 zziplib-devel-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libzzip-0-13-0.13.67-10.14.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libzzip-0-13-0.13.72-1.4 as a component of openSUSE Tumbleweed libzzip-0-13-32bit-0.13.72-1.4 as a component of openSUSE Tumbleweed zziplib-devel-0.13.72-1.4 as a component of openSUSE Tumbleweed zziplib-devel-32bit-0.13.72-1.4 as a component of openSUSE Tumbleweed libzzip-0-13 as a component of SUSE CaaS Platform 4.0 zziplib-devel as a component of SUSE CaaS Platform 4.0 zziplib as a component of SUSE CaaS Platform 4.0 zziplib as a component of SUSE Enterprise Storage 6 libzzip-0-13 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS zziplib-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS zziplib as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libzzip-0-13 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS zziplib-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS zziplib as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libzzip-0-13 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 zziplib-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 zziplib as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libzzip-0-13 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS zziplib-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS zziplib as a component of SUSE Linux Enterprise Server 15 SP1-LTSS zziplib as a component of SUSE Linux Enterprise Server 15-ESPOS libzzip-0-13 as a component of SUSE Linux Enterprise Server 15-LTSS zziplib-devel as a component of SUSE Linux Enterprise Server 15-LTSS zziplib as a component of SUSE Linux Enterprise Server 15-LTSS zziplib as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 libzzip-0-13 as a component of SUSE Linux Enterprise Server for SAP Applications 15 zziplib-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 zziplib as a component of SUSE Linux Enterprise Server for SAP Applications 15 libzzip-0-13 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 zziplib-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 zziplib as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 zziplib as a component of SUSE Manager Proxy 4.0 zziplib as a component of SUSE Manager Retail Branch Server 4.0 zziplib as a component of SUSE Manager Server 4.0 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. CVE-2018-6540 SUSE Linux Enterprise Desktop 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Desktop 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Desktop 12 SP4:libzzip-0-13-0.13.67-10.14.1 SUSE Linux Enterprise Module for Basesystem 15:libzzip-0-13-0.13.69-1.13 SUSE Linux Enterprise Module for Basesystem 15:zziplib-devel-0.13.69-1.13 SUSE Linux Enterprise Module for Basesystem 15 SP1:libzzip-0-13-0.13.69-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:zziplib-devel-0.13.69-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libzzip-0-13-0.13.69-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:zziplib-devel-0.13.69-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libzzip-0-13-0.13.69-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:zziplib-devel-0.13.69-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libzzip-0-13-0.13.69-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:zziplib-devel-0.13.69-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libzzip-0-13-0.13.69-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:zziplib-devel-0.13.69-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libzzip-0-13-0.13.72-150600.2.2 SUSE Linux Enterprise Module for Basesystem 15 SP6:zziplib-devel-0.13.72-150600.2.2 SUSE Linux Enterprise Module for Basesystem 15 SP7:libzzip-0-13-0.13.78-150700.1.5 SUSE Linux Enterprise Module for Basesystem 15 SP7:zziplib-devel-0.13.78-150700.1.5 SUSE Linux Enterprise Software Development Kit 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libzzip-0-13-0.13.67-10.14.1 SUSE Linux Enterprise Software Development Kit 12 SP4:zziplib-devel-0.13.67-10.14.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP4:libzzip-0-13-0.13.67-10.14.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libzzip-0-13-0.13.67-10.5.1 openSUSE Tumbleweed:libzzip-0-13-0.13.72-1.4 openSUSE Tumbleweed:libzzip-0-13-32bit-0.13.72-1.4 openSUSE Tumbleweed:zziplib-devel-0.13.72-1.4 openSUSE Tumbleweed:zziplib-devel-32bit-0.13.72-1.4 SUSE CaaS Platform 4.0:libzzip-0-13 SUSE CaaS Platform 4.0:zziplib SUSE CaaS Platform 4.0:zziplib-devel SUSE Enterprise Storage 6:zziplib SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libzzip-0-13 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:zziplib SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:zziplib-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libzzip-0-13 SUSE Linux Enterprise High Performance Computing 15-LTSS:zziplib SUSE Linux Enterprise High Performance Computing 15-LTSS:zziplib-devel SUSE Linux Enterprise Module for Basesystem 15 SP2:libzzip-0-13 SUSE Linux Enterprise Module for Basesystem 15 SP2:zziplib SUSE Linux Enterprise Module for Basesystem 15 SP2:zziplib-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libzzip-0-13 SUSE Linux Enterprise Server 15 SP1-LTSS:zziplib SUSE Linux Enterprise Server 15 SP1-LTSS:zziplib-devel SUSE Linux Enterprise Server 15-ESPOS:zziplib SUSE Linux Enterprise Server 15-LTSS:libzzip-0-13 SUSE Linux Enterprise Server 15-LTSS:zziplib SUSE Linux Enterprise Server 15-LTSS:zziplib-devel SUSE Linux Enterprise Server Business Critical Linux 15 SP1:zziplib SUSE Linux Enterprise Server for SAP Applications 15 SP1:libzzip-0-13 SUSE Linux Enterprise Server for SAP Applications 15 SP1:zziplib SUSE Linux Enterprise Server for SAP Applications 15 SP1:zziplib-devel SUSE Linux Enterprise Server for SAP Applications 15:libzzip-0-13 SUSE Linux Enterprise Server for SAP Applications 15:zziplib SUSE Linux Enterprise Server for SAP Applications 15:zziplib-devel SUSE Manager Proxy 4.0:zziplib SUSE Manager Retail Branch Server 4.0:zziplib SUSE Manager Server 4.0:zziplib moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L