Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-unzip | Mar 26, 2024 | Oct 16, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-unzipamazon-linux-ami-2-upgrade-unzip-debuginfo | Apr 27, 2020 | Oct 16, 2018 | |
| Centos_linux | — | centos-upgrade-unzipcentos-upgrade-unzip-debuginfo | Aug 28, 2019 | Oct 16, 2018 |
| Debian | debian-upgrade-unzip | Jul 30, 2024 | Oct 16, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-unzip | May 7, 2019 | Oct 16, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-unzip | May 30, 2019 | Oct 16, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-unzip | May 7, 2019 | Oct 16, 2018 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-unzip | Jul 26, 2019 | Oct 16, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-unzip | Jul 21, 2020 | Sep 28, 2018 |
| Redhat_linux | — | redhat-upgrade-unzipredhat-upgrade-unzip-debuginfo | Aug 7, 2019 | Oct 16, 2018 |
| Suse | — | suse-upgrade-unzipsuse-upgrade-unzip-docsuse-upgrade-unzip-rcc | Apr 1, 2019 | Oct 16, 2018 |
| Ubuntu | ubuntu-upgrade-unzip | Dec 17, 2020 | Oct 16, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub