AZL-35341 CVE-2019-13232 affecting package unzip for versions less than 6.0-20

🗓️ 04 Jul 2019 13:15:10Reported by GoogleType

osv

osv🔗 osv.dev

AZL-35341 and CVE-2019-13232 affect unzip versions below 6.0-20, causing denial of service from ZIP overlap.

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities	9 Apr 202103:15	–	ibm
IBM Security Bulletins	Security Bulletin: Unzip as used by IBM QRadar SIEM is vulnerable to denial of service (CVE-2019-13232)	13 Oct 202016:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2019-13232)	23 Jul 202021:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway may allow a potential DoS when importing malicious ZIP files (CVE-2019-13232)	8 Jun 202122:33	–	ibm
Tenable Nessus	Amazon Linux 2023 : unzip (ALAS2023-2026-1422)	5 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : unzip (ALAS-2020-1550)	27 Oct 202000:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0051: unzip (ALINUX3-SA-2022:0051)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : unzip (ALSA-2020:1787)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : unzip (CESA-2020:1787)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : unzip (CESA-2020:1181)	10 Apr 202000:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-13232

21 Apr 2026 04:24Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.13.3

EPSS0.00047

unzip vulnerability overlapping files zip bomb risk denial of service version below six information security zip file issue