Lucene search
DebianDEBIAN:DLA-150-1:8D190HistoryFeb 07, 2015 - 1:51 p.m.
[SECURITY] [DLA 150-1] unzip security update
2015-02-0713:51:00
lists.debian.org
10
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.259 Low
EPSS
Percentile
96.7%
Package : unzip
Version : 6.0-4+deb6u2
CVE ID : CVE-2014-8139 CVE-2014-9636
Debian Bug : 775640 776589
A flaw was found in the test_compr_eb() function allowing out-of-bounds
read and write access to memory locations. By carefully crafting a
corrupt ZIP archive an attacker can trigger a heap overflow, resulting
in application crash or possibly having other unspecified impact.
Additionally this update corrects a defective patch applied to address
CVE-2014-8139, which caused a regression with executable jar files.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 6 | all | unzip | < 6.0-4+deb6u2 | unzip_6.0-4+deb6u2_all.deb |
| Debian | 7 | i386 | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_i386.deb |
| Debian | 7 | sparc | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_sparc.deb |
| Debian | 7 | armhf | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_armhf.deb |
| Debian | 7 | armel | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_armel.deb |
| Debian | 7 | mips | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_mips.deb |
| Debian | 7 | amd64 | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_amd64.deb |
| Debian | 7 | all | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_all.deb |
| Debian | 7 | ia64 | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_ia64.deb |
| Debian | 7 | powerpc | unzip | < 6.0-8+deb7u2 | unzip_6.0-8+deb7u2_powerpc.deb |
Related
securityvulns
securityvulns
[SECURITY] [DSA 3152-1] unzip security update
2015-02-11 00:00:00
UnZip multiple security vulnerabilities
2015-02-22 00:00:00
[oCERT-2014-011] UnZip input sanitization errors
2014-12-23 00:00:00
nessus
nessus
Debian DLA-150-1 : unzip security update
2015-03-26 00:00:00
Debian DSA-3152-1 : unzip - security update
2015-02-04 00:00:00
SuSE 11.3 Security Update : unzip (SAT Patch Number 10344)
2015-02-26 00:00:00
debian
debian
[SECURITY] [DSA 3152-1] unzip security update
2015-02-03 15:04:37
[SECURITY] [DSA 3152-1] unzip security update
2015-02-03 15:04:37
[SECURITY] [DSA 3113-1] unzip security update
2014-12-28 08:05:44
openvas
openvas
Debian: Security Advisory (DSA-3152-1)
2015-02-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0377-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-150-1)
2023-03-08 00:00:00
osv
osv
unzip - security update
2015-02-07 00:00:00
unzip - security update
2015-02-03 00:00:00
CVE-2014-8139
2020-01-31 22:15:10
ibm
ibm
oraclelinux
oraclelinux
unzip security update
2015-03-18 00:00:00
gentoo
gentoo
UnZip: Multiple vulnerabilities
2016-11-01 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: unzip-6.0-17.fc20
2015-02-23 23:25:28
[SECURITY] Fedora 21 Update: unzip-6.0-20.fc21
2015-02-16 03:25:55
[SECURITY] Fedora 20 Update: unzip-6.0-15.fc20
2015-01-30 04:35:06
amazon
amazon
Medium: unzip
2015-04-15 21:48:00
centos
centos
unzip security update
2015-03-18 18:53:06
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:17:42
Denial Of Service (DoS)
2019-01-15 09:05:07
redhat
redhat
(RHSA-2015:0700) Moderate: unzip security update
2015-03-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2014-8139 affecting package unzip 6.0-19
2020-10-08 18:09:51
CVE-2014-8139 affecting package unzip for versions less than 6.0-19
2022-04-09 06:51:51
CVE-2014-8139 affecting package unzip for versions less than 6.0-20
2024-03-19 17:21:46
ubuntucve
ubuntucve
CVE-2014-8139
2014-12-28 00:00:00
CVE-2014-9636
2014-12-31 00:00:00
prion
prion
Heap overflow
2020-01-31 22:15:00
Out-of-bounds
2015-02-06 15:59:00
cve
cve
CVE-2014-8139
2020-01-31 22:15:00
CVE-2014-9636
2015-02-06 15:59:00
alpinelinux
alpinelinux
CVE-2014-8139
2020-01-31 22:15:00
CVE-2014-9636
2015-02-06 15:59:00
debiancve
debiancve
CVE-2014-8139
2020-01-31 22:15:00
CVE-2014-9636
2015-02-06 15:59:00
ubuntu
ubuntu
unzip vulnerability
2015-02-03 00:00:00
unzip vulnerabilities
2015-01-14 00:00:00
freebsd
freebsd
unzip -- out of boundary access issues in test_compr_eb
2014-11-02 00:00:00
unzip -- input sanitization errors
2014-12-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Unzip Extra Field Uncompressed Size Buffer Overflow (CVE-2014-9636)
2015-04-20 00:00:00
archlinux
archlinux
unzip: arbitrary code execution
2015-03-15 00:00:00
unzip: arbitrary code execution
2015-01-10 00:00:00
suse
suse
Security update for unzip (moderate)
2018-07-07 03:08:17
Security update for unzip (moderate)
2018-10-05 21:18:21
f5
f5
mageia
mageia
Updated unzip package fixes security vulnerabilities
2014-12-31 15:28:04
photon
photon
slackware
slackware
[slackware-security] infozip
2019-03-01 20:58:06
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.259 Low
EPSS
Percentile
96.7%
Related for DEBIAN:DLA-150-1:8D190