Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-4217

Опубликовано: 14 янв. 2022
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6unzipOut of support scope
Red Hat Enterprise Linux 7unzipOut of support scope
Red Hat Enterprise Linux 8unzipFix deferred
Red Hat Enterprise Linux 9unzipFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2044583unzip: Null pointer dereference in Unicode strings code

EPSS

Процентиль: 43%
0.0057
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 3.3
ubuntu
почти 4 года назад

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

CVSS3: 3.3
nvd
почти 4 года назад

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

CVSS3: 3.3
msrc
больше 1 года назад

The vulnerability in unzip occurs due to improper handling of Unicode strings

CVSS3: 3.3
debian
почти 4 года назад

A flaw was found in unzip. The vulnerability occurs due to improper ha ...

CVSS3: 7.8
github
почти 4 года назад

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

EPSS

Процентиль: 43%
0.0057
Низкий

3.3 Low

CVSS3