AZL-35340 CVE-2018-18384 affecting package unzip for versions less than 6.0-20

🗓️ 16 Oct 2018 16:50:12Reported by GoogleType

osv

osv🔗 osv.dev

AZL-35340 and vulnerability 2018-18384 affect unzip older than 6.0-20; list.c overflow from sizes.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter Dynamic System Analysis (DSA) Preboot is affected by multiple vulnerabilities.	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed	22 Dec 202018:18	–	ibm
IBM Security Bulletins	Security Bulletin: An Info-ZIP Unzip vulnerability has been identified in IBM Tivoli Application Dependency Discovery Manager(TADDM).	26 Apr 202118:03	–	ibm
Tenable Nessus	Amazon Linux 2 : unzip (ALAS-2019-1355)	7 Nov 201900:00	–	nessus
Tenable Nessus	CentOS 7 : unzip (CESA-2019:2159)	30 Aug 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : unzip (EulerOS-SA-2019-1348)	6 May 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : unzip (EulerOS-SA-2019-1349)	6 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : unzip (EulerOS-SA-2019-1467)	13 May 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : unzip (EulerOS-SA-2019-1603)	29 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : unzip (EulerOS-SA-2019-1627)	30 May 201900:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-18384

21 Apr 2026 04:24Current

6.6Medium risk

Vulners AI Score6.6

CVSS 35.5

EPSS0.03223

unzip vulnerability buffer overflow list.c issue compressed size relation uncompressed size older versions zip archive