[SECURITY] [DLA 150-1] unzip security update

🗓️ 07 Feb 2015 13:51:00Reported by DebianType

debian

debian🔗 lists.debian.org👁 35 Views

unzip security update for Debian

Reporter	Title	Published	Views	Family All 180
IBM Security Bulletins	Security Bulletin: Vulnerabilities in unzip affect IBM Security Network Protection (CVE-2014-8139, CVE-2014-8140, CVE-2014-8141, and CVE-2014-9636 )	16 Jun 201821:25	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in unzip affect IBM Security Network Intrusion Prevention System (CVE-2014-8139, CVE-2014-8140, CVE-2014-8141, and CVE-2014-9636 )	23 Feb 202219:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in unzip affect IBM DataPower Gateways (CVE-2014-8141)	15 Jun 201807:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Unzip vulnerabilities affect PowerKVM (Multiple CVEs)	18 Jun 201801:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in unzip, krb5, tomcat, affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in unzip affect Power Hardware Management Console (CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-9636)	23 Sep 202101:31	–	ibm
Tenable Nessus	Mac OS X < 10.10.4 Multiple Vulnerabilities	12 Oct 201500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : unzip (ALAS-2015-504)	17 Apr 201500:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : unzip (CESA-2015:0700)	19 Mar 201500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	6	any	unzip	6.0-4+deb6u2	unzip_6.0-4+deb6u2_any.deb

07 Feb 2015 13:51Current

8.2High risk

Vulners AI Score8.2

CVSS 26.8

CVSS 3.17.8

EPSS0.11562

unzip security update debian 6 heap overflow application crash cve-2014-8139 cve-2014-9636 memory access