Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade unzip | May 4, 2022 | Jul 4, 2019 |
| Alpine Linux | — | Upgrade unzip | Mar 26, 2024 | Jul 4, 2019 |
| Amazon Linux Ami 2 | — | Upgrade unzipUpgrade unzip-debuginfo | Oct 28, 2020 | Jul 4, 2019 |
| Amazon_linux_2023 | — | Upgrade unzip-debuginfoUpgrade unzipUpgrade unzip-debugsource | Feb 10, 2026 | Jul 2, 2019 |
| Centos_linux | — | Upgrade unzip-debuginfoUpgrade unzipUpgrade unzip-debugsource | Apr 1, 2020 | Jul 4, 2019 |
| Debian | — | Upgrade unzip | Jul 9, 2019 | Jul 4, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 17, 2019 |
| Gentoo Linux | — | Upgrade app-arch/unzip. | Mar 27, 2020 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade unzip | Jun 17, 2020 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade unzip | Sep 25, 2019 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade unzip | Sep 12, 2019 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unzip | Aug 28, 2019 | Jul 4, 2019 |
| Oracle_linux | — | Upgrade unzip | Oct 5, 2022 | Jul 2, 2019 |
| Redhat_linux | — | Upgrade unzip-debugsourceNo solution existsUpgrade unzipUpgrade unzip-debuginfo | Apr 1, 2020 | Jul 4, 2019 |
| Ubuntu | — | Upgrade unzip | Dec 17, 2020 | Jul 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub