Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-18384

Опубликовано: 28 сент. 2018
Источник: redhat
CVSS3: 3.3

Описание

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5unzipWill not fix
Red Hat Enterprise Linux 6unzipWill not fix
Red Hat Enterprise Linux 8unzipNot affected
Red Hat Enterprise Linux 7unzipFixedRHSA-2019:215906.08.2019

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-119
https://bugzilla.redhat.com/show_bug.cgi?id=1642931unzip: Buffer overflow in list.c resulting in a denial of service

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 7 лет назад

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

CVSS3: 5.5
nvd
почти 7 лет назад

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

CVSS3: 5.5
msrc
около 5 лет назад

Описание отсутствует

CVSS3: 5.5
debian
почти 7 лет назад

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive ...

suse-cvrf
больше 6 лет назад

Security update for unzip

3.3 Low

CVSS3