USN-2788-1: unzip vulnerabilities

Gustavo Grieco discovered that unzip incorrectly handled certain password protected archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code. CVE-2015-7696 Gustavo Grieco discovered that unzip incorrect...

USN-2788-1 unzip vulnerabilities

Gustavo Grieco discovered that unzip incorrectly handled certain password protected archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code. CVE-2015-7696 Gustavo Grieco discovered that unzip incorrect...

Debian DLA-330-1 : unzip security update

Gustavo Grieco discovered with a fuzzer that unzip was vulnerable to a heap overflow and to a denial of service with specially crafted password-protected ZIP archives. For the Debian 6 squeeze, these issues haven been fixed in unzip 6.0-4+deb6u3. NOTE: Tenable Network Security has extracted the...

[SECURITY] [DLA 330-1] unzip security update

Package : unzip Version : 6.0-4+deb6u3 CVE ID : CVE-2015-7696 CVE-2015-7697 Debian Bug : 802160 802162 Gustavo Grieco discovered with a fuzzer that unzip was vulnerable to a heap overflow and to a denial of service with specially crafted password-protected ZIP archives. For the Debian 6 squeeze,...

DLA-330-1 unzip - security update

Bulletin has no description...

CVE-2015-7696

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...

CVE-2015-7697

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

UBUNTU-CVE-2015-7696

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...

Oracle: Security Advisory (ELSA-2015-0700)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for unzip FEDORA-2015-15859

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : unzip-6.0-22.fc21 (2015-15859)

unzip-6.0-22.fc21 - Fix heap overflow and infinite loop when invalid input is given 1260947 unzip-6.0-22.fc22 - Fix heap overflow and infinite loop when invalid input is given 1260947 unzip-6.0-23.fc23 - Fix heap overflow and infinite loop when invalid input is given 1260947 Note that Tenable...

[SECURITY] Fedora 21 Update: unzip-6.0-22.fc21

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

unzip -- multiple vulnerabilities

Gustavo Grieco reports: Two issues were found in unzip 6.0: A heap overflow triggered by unzipping a file with password e.g unzip -p -P x sigsegv.zip. A denegation of service with a file that never finishes unzipping e.g. unzip sigxcpu.zip...

MGASA-2015-0384 Updated unzip packages fix security vulnerabilities

Updated unzip packages fix security vulnerabilities: The unzip program is susceptible to heap overflow and denial of service issues when fed invalid input. It has been patched to correct these issues...

Updated unzip packages fix security vulnerabilities

Updated unzip packages fix security vulnerabilities: The unzip program is susceptible to heap overflow and denial of service issues when fed invalid input. It has been patched to correct these issues...

Fedora Update for unzip FEDORA-2015-15858

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : unzip-6.0-22.fc22 (2015-15858)

unzip-6.0-22.fc21 - Fix heap overflow and infinite loop when invalid input is given 1260947 unzip-6.0-22.fc22 - Fix heap overflow and infinite loop when invalid input is given 1260947 unzip-6.0-23.fc23 - Fix heap overflow and infinite loop when invalid input is given 1260947 Note that Tenable...

[SECURITY] Fedora 22 Update: unzip-6.0-22.fc22

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

Fedora 23 : unzip-6.0-23.fc23 (2015-15860)

unzip-6.0-22.fc21 - Fix heap overflow and infinite loop when invalid input is given 1260947 unzip-6.0-22.fc22 - Fix heap overflow and infinite loop when invalid input is given 1260947 unzip-6.0-23.fc23 - Fix heap overflow and infinite loop when invalid input is given 1260947 Note that Tenable...

[SECURITY] Fedora 23 Update: unzip-6.0-23.fc23

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...