CVE-2025-15649

A flaw was found in perl-IO-Compress. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted zip file. The IO::Uncompress::Unzip module, which is part of perl-IO-Compress, does not properly handle malformed date information within a zip file's header. This can lead to an uncaught error that causes the program to crash, making the affected system unavailable.

This Moderate flaw in perl-IO-Compress can lead to a Denial of Service. By processing a specially crafted zip file containing malformed date information in its header, an application utilizing the IO::Uncompress::Unzip module may crash. This vulnerability primarily affects systems where applications handle untrusted compressed archives, potentially leading to service unavailability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.