Info-ZIP UnZip 6.0 has a buffer overflow in list.c when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value because a buffer size is 10 and is supposed to be 12.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

Info-ZIP UnZip 6.0 has a buffer overflow in list.c due to crafted compressed-size and uncompressed-size.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter Dynamic System Analysis (DSA) Preboot is affected by multiple vulnerabilities.	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed	22 Dec 202018:18	–	ibm
IBM Security Bulletins	Security Bulletin: An Info-ZIP Unzip vulnerability has been identified in IBM Tivoli Application Dependency Discovery Manager(TADDM).	26 Apr 202118:03	–	ibm
Tenable Nessus	Amazon Linux 2 : unzip (ALAS-2019-1355)	7 Nov 201900:00	–	nessus
Tenable Nessus	CentOS 7 : unzip (CESA-2019:2159)	30 Aug 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : unzip (EulerOS-SA-2019-1348)	6 May 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : unzip (EulerOS-SA-2019-1349)	6 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : unzip (EulerOS-SA-2019-1467)	13 May 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : unzip (EulerOS-SA-2019-1603)	29 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : unzip (EulerOS-SA-2019-1627)	30 May 201900:00	–	nessus