CVE-2014-9913

Опубликовано: 18 янв. 2017

Источник: nvd

CVSS3: 4

CVSS2: 2.1

EPSS Низкий

Описание

Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.

Ссылки

http://www.openwall.com/lists/oss-security/2014/11/03/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/12/05/13
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/12/05/19
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/12/05/20
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/95081
Third Party Advisory
VDB Entry
https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750
Issue Tracking
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/11/03/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/12/05/13
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/12/05/19
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/12/05/20
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/95081
Third Party Advisory
VDB Entry
https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:unzip_project:unzip:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.0331

Низкий

4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2014-9913

CVSS3: 4

ubuntu

больше 8 лет назад

Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.

CVE-2014-9913

CVSS3: 3.3

redhat

больше 10 лет назад

Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.

CVE-2014-9913

CVSS3: 4

msrc

почти 5 лет назад

Описание отсутствует

CVE-2014-9913

CVSS3: 4

debian

больше 8 лет назад

Buffer overflow in the list_files function in list.c in Info-Zip UnZip ...

GHSA-7vv9-r95r-f25f

CVSS3: 4

github

около 3 лет назад

Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.

EPSS

Процентиль: 87%

0.0331

Низкий

4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-119