Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-4217

Опубликовано: 14 янв. 2022
Источник: redhat
CVSS3: 3.3

Описание

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6unzipOut of support scope
Red Hat Enterprise Linux 7unzipOut of support scope
Red Hat Enterprise Linux 8unzipFix deferred
Red Hat Enterprise Linux 9unzipFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2044583unzip: Null pointer dereference in Unicode strings code

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 3 лет назад

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

CVSS3: 3.3
nvd
больше 3 лет назад

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

CVSS3: 3.3
msrc
10 месяцев назад

Описание отсутствует

CVSS3: 3.3
debian
больше 3 лет назад

A flaw was found in unzip. The vulnerability occurs due to improper ha ...

CVSS3: 7.8
github
больше 3 лет назад

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

3.3 Low

CVSS3