Bug 2481766 (CVE-2025-15649) - CVE-2025-15649 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header
Summary: CVE-2025-15649 perl-IO-Compress: perl-IO-Compress: Denial of Service via malf...
Keywords:
Status: NEW
Alias: CVE-2025-15649
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2489171
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-27 04:01 UTC by OSIDB Bzimport
Modified: 2026-06-16 13:00 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-05-27 04:01:19 UTC
IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date.

_dosToUnixTime() decodes the local-file-header last-modification date field and calls Time::Local::timelocal() without an eval guard. A header whose date field decodes to an out-of-range month, day, or hour causes timelocal() to die.

The exception propagates out of IO::Uncompress::Unzip->new($file) where callers expect undef plus $UnzipError.


Note You need to log in before you can comment on or make changes to this bug.