Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:13984-1

Опубликовано: 21 мар. 2019
Источник: suse-cvrf

Описание

Security update for unzip

This update for unzip fixes the following issues:

  • CVE-2018-18384: Fixed a buffer overflow when listing archives (bsc#1110194)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
unzip-6.00-11.18.8.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
unzip-6.00-11.18.8.1

Ссылки

Описание

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:unzip-6.00-11.18.8.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:unzip-6.00-11.18.8.1
Ссылки