Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0465-1

Опубликовано: 16 фев. 2018
Источник: suse-cvrf

Описание

Security update for unzip

This update for unzip fixes the following issues:

  • CVE-2018-1000035: Fixed a heap-based buffer overflow in password protected ZIP archives (bsc#1080074)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
unzip-6.00-11.18.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
unzip-6.00-11.18.3.1

Ссылки

Описание

A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:unzip-6.00-11.18.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:unzip-6.00-11.18.3.1
Ссылки