Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2018-0422
HistoryOct 30, 2018 - 9:01 p.m.

Updated unzip packages fix security vulnerabilities

2018-10-3021:01:43
Gentoo Foundation
advisories.mageia.org
11

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

93.5%

JSON

Updated unzip packages fix security vulnerabilities Heap-based out-of-bounds write (CVE-2018-1000031). Heap/BSS-based buffer overflow (Bypass of CVE-2015-1315) (CVE-2018-1000032). Heap out-of-bounds access in ef_scan_for_stream (CVE-2018-1000033). Multiple vulnerabilities in the LZMA compression algorithm (CVE-2018-1000034). Heap-based buffer overflow in password protected ZIP archives (CVE-2018-1000035).

OSVersionArchitecturePackageVersionFilename
Mageia6noarchunzip< 6.1c-1.1unzip-6.1c-1.1.mga6

Related

openvas 15
packetstorm 1
nessus 23
redhatcve 5
prion 6
cve 6
debiancve 6
ubuntucve 6
photon 6
checkpoint_advisories 1
osv 3
cbl_mariner 3
fedora 1
debian 1
alpinelinux 1
broadcom 1
veracode 1
ubuntu 2
securityvulns 2
freebsd 1
gentoo 1
suse 2
amazon 1
rosalinux 1
cloudfoundry 1
slackware 1
openvas
openvas
Mageia: Security Advisory (MGASA-2018-0422)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0465-1)
2021-06-09 00:00:00
Fedora Update for unzip FEDORA-2018-ab3d1d78f3
2018-03-14 00:00:00
packetstorm
packetstorm
InfoZip UnZip 6.00 / 6.1c22 Buffer Overflow
2018-02-07 00:00:00
nessus
nessus
Fedora 27 : unzip (2018-ab3d1d78f3)
2018-03-07 00:00:00
Photon OS 1.0 : unzip (PhotonOS-PHSA-2018-1.0-0144) (deprecated)
2018-07-24 00:00:00
Photon OS 2.0 : unzip (PhotonOS-PHSA-2018-2.0-0052) (deprecated)
2018-07-24 00:00:00
redhatcve
redhatcve
CVE-2018-1000032
2018-02-08 09:19:51
CVE-2018-1000034
2018-02-08 09:48:50
CVE-2018-1000033
2018-02-08 09:19:31
prion
prion
Cross site scripting
2018-02-09 23:29:00
Cross site scripting
2018-02-09 23:29:00
Heap overflow
2018-02-09 23:29:00
cve
cve
CVE-2018-1000034
2018-02-09 23:29:00
CVE-2018-1000033
2018-02-09 23:29:00
CVE-2018-1000032
2018-02-09 23:29:00
debiancve
debiancve
CVE-2018-1000034
2018-02-09 23:29:00
CVE-2018-1000033
2018-02-09 23:29:00
CVE-2018-1000032
2018-02-09 23:29:00
ubuntucve
ubuntucve
CVE-2018-1000033
2018-02-09 00:00:00
CVE-2018-1000032
2018-02-09 00:00:00
CVE-2018-1000034
2018-02-09 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0052
2018-06-01 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0144
2018-06-01 00:00:00
Important Photon OS Security Update - PHSA-2018-0052
2018-06-01 00:00:00
checkpoint_advisories
checkpoint_advisories
InfoZip UnZip Buffer Overflow (CVE-2018-1000035)
2022-09-18 00:00:00
osv
osv
unzip - security update
2020-01-28 00:00:00
CVE-2018-1000035
2018-02-09 23:29:01
unzip vulnerabilities
2020-12-16 17:27:07
cbl_mariner
cbl_mariner
CVE-2018-1000035 affecting package unzip 6.0-19
2020-10-08 18:09:51
CVE-2018-1000035 affecting package unzip 6.0-20
2022-04-09 06:51:51
CVE-2018-1000035 affecting package unzip 6.0-20
2024-03-19 17:21:46
fedora
fedora
[SECURITY] Fedora 27 Update: unzip-6.0-37.fc27
2018-03-06 17:36:06
debian
debian
[SECURITY] [DLA 2082-1] unzip security update
2020-01-28 21:18:22
alpinelinux
alpinelinux
CVE-2018-1000035
2018-02-09 23:29:00
broadcom
broadcom
Buffer overflow in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string
2023-08-29 00:00:00
veracode
veracode
Denial Of Service(DoS)
2020-12-17 06:43:42
ubuntu
ubuntu
unzip vulnerabilities
2015-02-17 00:00:00
unzip vulnerabilities
2020-12-16 00:00:00
securityvulns
securityvulns
[USN-2502-1] unzip vulnerabilities
2015-02-22 00:00:00
UnZip multiple security vulnerabilities
2015-02-22 00:00:00
freebsd
freebsd
unzip -- heap based buffer overflow in iconv patch
2015-02-17 00:00:00
gentoo
gentoo
UnZip: User-assisted execution of arbitrary code
2020-03-26 00:00:00
suse
suse
Security update for unzip (moderate)
2018-07-07 03:08:17
Security update for unzip (moderate)
2018-10-05 21:18:21
amazon
amazon
Important: unzip
2021-02-17 18:14:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1991
2021-07-02 18:18:35
cloudfoundry
cloudfoundry
USN-4672-1: unzip vulnerabilities | Cloud Foundry
2021-02-10 00:00:00
slackware
slackware
[slackware-security] infozip
2019-03-01 20:58:06

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

93.5%

JSON
Related for MGASA-2018-0422
openvas15packetstorm1nessus23redhatcve5prion6cve6debiancve6ubuntucve6photon6checkpoint_advisories1osv3cbl_mariner3fedora1debian1alpinelinux1broadcom1veracode1ubuntu2securityvulns2freebsd1gentoo1suse2amazon1rosalinux1cloudfoundry1slackware1