Описание
Security update for unzip
This update fixes the following security issues:
Security Issues:
Список пакетов
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-TERADATA
SUSE Linux Enterprise Server for SAP Applications 11 SP3
Ссылки
- Link for SUSE-SU-2015:0377-1
- E-Mail link for SUSE-SU-2015:0377-1
- SUSE Security Ratings
- SUSE Bug 909214
- SUSE Bug 914442
- SUSE CVE CVE-2014-8139 page
- SUSE CVE CVE-2014-8140 page
- SUSE CVE CVE-2014-8141 page
- SUSE CVE CVE-2014-9636 page
Описание
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
Затронутые продукты
Ссылки
- CVE-2014-8139
- SUSE Bug 909214
- SUSE Bug 915880
Описание
Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
Затронутые продукты
Ссылки
- CVE-2014-8140
- SUSE Bug 909214
- SUSE Bug 914442
- SUSE Bug 915880
Описание
Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
Затронутые продукты
Ссылки
- CVE-2014-8141
- SUSE Bug 909214
- SUSE Bug 915880
Описание
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
Затронутые продукты
Ссылки
- CVE-2014-9636
- SUSE Bug 914442