DSA-3152-1 unzip - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3152-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for unzip FEDORA-2015-1267

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2015:0355-1 Security update for unzip

unzip was updated to fix one security issue. This security issue was fixed: - Out-of-bounds read/write in testcompreb in extract.c CVE-2014-9636...

[SECURITY] Fedora 20 Update: unzip-6.0-15.fc20

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

Fedora 20 : unzip-6.0-15.fc20 (2015-1267)

Security fix for CVE-2014-9636 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for unzip FEDORA-2015-1189

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : unzip-6.0-18.fc21 (2015-1189)

Security fix for CVE-2014-9636 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] Fedora 21 Update: unzip-6.0-18.fc21

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

Ubuntu: Security Advisory (USN-2472-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.3 Security Update : unzip (SAT Patch Number 10159)

This update fixes the following security issues : - heap overflow condition in the CRC32 verification. CVE-2014-8139 - write error 8349 shows a problem in extract.c:testcompreb. CVE-2014-8140 - read errors 6430, 3422 show problems in process.c:getZip64Data. CVE-2014-8141 %NASLMINLEVEL 70300 C...

FreeBSD : unzip -- input sanitization errors (d9360908-9d52-11e4-87fd-10bf48e1088e)

oCERT reports : The UnZip tool is an open source extraction utility for archives compressed in the zip format. The unzip command line tool is affected by heap-based buffer overflows within the CRC32 verification, the testcompreb and the getZip64Data functions. The input errors may result in...

Ubuntu 14.04 LTS : unzip vulnerabilities (USN-2472-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2472-1 advisory. Wolfgang Ettlinger discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a...

USN-2472-1 unzip vulnerabilities

Wolfgang Ettlinger discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code...

USN-2472-1: unzip vulnerabilities

Wolfgang Ettlinger discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code...

unzip: arbitrary code execution

CVE-2014-8139 heap buffer overflow A heap-based buffer overflow exists in the CRC32 verification that allows attackers to potentially execute arbitrary code or cause a denial of service memory corruption. - CVE-2014-8140 out-of-bounds read/write Out-of-bounds access both read and write issues...

Mandriva Linux Security Advisory : unzip (MDVSA-2015:016)

Updated unzip package fix security vulnerabilities : The unzip command line tool is affected by heap-based buffer overflows within the CRC32 verification CVE-2014-8139, the testcompreb CVE-2014-8140 and the getZip64Data CVE-2014-8141 functions. The input errors may result in in arbitrary code...

Info-ZIP UnZip Out-of-Bounds Read Heap Buffer Overflow Vulnerability

unzip is a tool for decompressing the .zip file format under Unix. Info-ZIP The UnZip getZip64Data function is vulnerable to an out-of-bounds read heap buffer overflow, which allows an attacker to construct a malicious file that can be tricked into being parsed by the user, crashing the applicati...

Info-ZIP UnZip Out-of-Bounds Write Heap Buffer Overflow Vulnerability

unzip is a tool for decompressing the .zip file format under Unix. Info-ZIP The UnZip testcompreb function is vulnerable to an out-of-bounds write heap buffer overflow that allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application...

Info-ZIP UnZip Out-of-Bounds Denial of Service Vulnerability

unzip is a tool for decompressing the .zip file format under Unix. Info-ZIP UnZi has a denial of service vulnerability that allows attackers to crash an application, resulting in a denial of service...