libarchive Undefined Behavior Vulnerability in Zisofs Decompression Logic Leading to Denial-of-Service

A vulnerability causing undefined behavior has been identified in the libarchive library's zisofs decompression logic. This issue arises from inadequate validation of the pz_log2_bs field, which is read from ISO9660 Rock Ridge extensions and used as a shift exponent. A remote attacker can exploit this vulnerability by providing a specially crafted ISO file, which can lead to incorrect memory allocation and application crashes, causing a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause applications to crash, exit, or restart, creating a denial-of-service condition.

Remediation

To mitigate this vulnerability, avoid processing untrusted ISO9660 images with libarchive. Ensure that ISO files are sourced from trusted entities.