Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade unzip | Mar 26, 2024 | Oct 16, 2018 |
| Amazon Linux Ami 2 | — | Upgrade unzip-debuginfoUpgrade unzip | Apr 27, 2020 | Oct 16, 2018 |
| Centos_linux | — | Upgrade unzipUpgrade unzip-debuginfo | Aug 28, 2019 | Oct 16, 2018 |
| Debian | — | Upgrade unzip | Jul 30, 2024 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade unzip | May 7, 2019 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade unzip | May 30, 2019 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade unzip | May 7, 2019 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unzip | Jul 26, 2019 | Oct 16, 2018 |
| Oracle_linux | — | Upgrade unzip | Jul 21, 2020 | Sep 28, 2018 |
| Redhat_linux | — | No solution existsUpgrade unzipUpgrade unzip-debuginfo | Aug 7, 2019 | Oct 16, 2018 |
| Suse | — | Upgrade unzip-docUpgrade unzipUpgrade unzip-rcc | Apr 1, 2019 | Oct 16, 2018 |
| Ubuntu | — | Upgrade unzip | Dec 17, 2020 | Oct 16, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub