CVE-2019-13232

Опубликовано: 04 июл. 2019

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.

Ссылки

https://github.com/madler/unzip
Product
Release Notes
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/07/msg00005.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/07/msg00027.html
Third Party Advisory
https://security.gentoo.org/glsa/202003-58
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190814-0002/
Third Party Advisory
https://support.f5.com/csp/article/K80311892?utm_source=f5support&amp%3Butm_medium=RSS
https://www.bamsoftware.com/hacks/zipbomb/
Third Party Advisory
https://github.com/madler/unzip
Product
Release Notes
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/07/msg00005.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/07/msg00027.html
Third Party Advisory
https://security.gentoo.org/glsa/202003-58
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190814-0002/
Third Party Advisory
https://support.f5.com/csp/article/K80311892?utm_source=f5support&amp%3Butm_medium=RSS
https://www.bamsoftware.com/hacks/zipbomb/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:unzip_project:unzip:6.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 14%

0.00046

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-400

Связанные уязвимости

CVE-2019-13232

CVSS3: 3.3

ubuntu

около 6 лет назад

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.

CVE-2019-13232

CVSS3: 4

redhat

около 6 лет назад

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.

CVE-2019-13232

CVSS3: 3.3

msrc

около 5 лет назад

Описание отсутствует

CVE-2019-13232

CVSS3: 3.3

debian

около 6 лет назад

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP co ...

GHSA-8vm7-647w-p9g4

CVSS3: 3.3

github

больше 3 лет назад

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.

EPSS

Процентиль: 14%

0.00046

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-400