Описание
Security update for unzip
This update for unzip fixes the following issues:
- CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption (bsc#1013993)
- CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to denial of service (bsc#950110)
- CVE-2015-7697: Specially crafted zip files could trigger an endless loop and lead to denial of service (bsc#950111)
- CVE-2016-9844: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption (bsc#1013992)
Список пакетов
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server for SAP Applications 11 SP4
Ссылки
- Link for SUSE-SU-2017:0639-1
- E-Mail link for SUSE-SU-2017:0639-1
- SUSE Security Ratings
- SUSE Bug 1013992
- SUSE Bug 1013993
- SUSE Bug 950110
- SUSE Bug 950111
- SUSE CVE CVE-2014-9913 page
- SUSE CVE CVE-2015-7696 page
- SUSE CVE CVE-2015-7697 page
- SUSE CVE CVE-2016-9844 page
Описание
Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.
Затронутые продукты
Ссылки
- CVE-2014-9913
- SUSE Bug 1013993
- SUSE Bug 1159417
Описание
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.
Затронутые продукты
Ссылки
- CVE-2015-7696
- SUSE Bug 1159417
- SUSE Bug 950110
Описание
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 data in a ZIP archive.
Затронутые продукты
Ссылки
- CVE-2015-7697
- SUSE Bug 1159417
- SUSE Bug 950110
- SUSE Bug 950111
Описание
Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header.
Затронутые продукты
Ссылки
- CVE-2016-9844
- SUSE Bug 1013992
- SUSE Bug 1159417