Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jjvf-xm75-cph5

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

EPSS

Процентиль: 86%
0.02889
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 7 лет назад

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

CVSS3: 3.3
redhat
почти 7 лет назад

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

CVSS3: 5.5
nvd
почти 7 лет назад

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

CVSS3: 5.5
msrc
около 5 лет назад

Описание отсутствует

CVSS3: 5.5
debian
почти 7 лет назад

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive ...

EPSS

Процентиль: 86%
0.02889
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-119