Ubuntu 24.04 LTS : unzip vulnerability (USN-7054-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7054-1 advisory. It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip file...

PT-2024-31904 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue is a Remote Code Execution RCE vulnerability via the nm unzip function. This allows for remote code execution, potentially leading to unauthorized access and control of the syste...

RHSA-2020:2486 Red Hat Security Advisory: unzip security update

Bulletin has no description...

RHSA-2020:1787 Red Hat Security Advisory: unzip security update

Bulletin has no description...

RHSA-2020:1181 Red Hat Security Advisory: unzip security update

Bulletin has no description...

RHSA-2019:2159 Red Hat Security Advisory: unzip security update

Bulletin has no description...

RHSA-2015:0700 Red Hat Security Advisory: unzip security update

Bulletin has no description...

RHSA-2008:0196 Red Hat Security Advisory: unzip security update

Bulletin has no description...

RHBA-2007:0418 Red Hat Bug Fix Advisory: unzip bug fix update

Bulletin has no description...

RHSA-2007:0203 Red Hat Security Advisory: unzip security and bug fix update

Bulletin has no description...

@c8y/application (>=1019.0.3 <=1019.24.6), @c8y/cli (>=10.0.7 <=1018.510.4) +99 more potentially affected by unknown CVE via unzip-stream (>=0.1.2 <=0.3.1)

unzip-stream NPM version =0.1.2, =1019.0.3, =10.0.7, =1019.0.3, =1019.0.3, =1019.4.8, =1019.4.8, =0.1.0, =0.1.0, =0.6.0, =0.2.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6JRJ-VC65-C983...

GHSA-6JRJ-VC65-C983 unzip-stream allows Arbitrary File Write via artifact extraction

Impact When using the Extract method of unzip-stream, malicious zip files were able to write to paths they shouldn't be allowed to. Patches Fixed in 0.3.2 References - https://snyk.io/research/zip-slip-vulnerability - https://github.com/mhr3/unzip-stream/compare/v0.3.1...v0.3.2 Credits Justin Taf...

PT-2024-40128 · Unknown · Unzip-Stream

Name of the Vulnerable Software and Affected Versions: unzip-stream versions prior to 0.3.2 Description: The issue allows malicious zip files to write to unauthorized paths when using the Extract method of unzip-stream. A researcher from Google, Justin Taft, discovered this issue. Recommendations...

PT-2024-38816 · D Link · Dns-320L +18

Name of the Vulnerable Software and Affected Versions: D-Link DNS-120 up to 20240814 D-Link DNR-202L up to 20240814 D-Link DNS-315L up to 20240814 D-Link DNS-320 up to 20240814 D-Link DNS-320L up to 20240814 D-Link DNS-320LW up to 20240814 D-Link DNS-321 up to 20240814 D-Link DNR-322L up to...

The vulnerability of the unzip method in Toshiba e-STUDIO microprogrammed multifunctional devices allows a perpetrator to execute arbitrary codes, create new files, or overwrite existing ones.

The vulnerability of the unzip method in Toshiba e-STUDIO microprogrammed devices is related to errors in processing the relative path to the catalog. Exploiting this vulnerability allows an attacker to execute arbitrary code, create new files, or overwrite existing ones...

Photon OS 4.0: Unzip PHSA-2023-4.0-0397

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0397. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Unzip PHSA-2023-3.0-0584

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0584. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Unzip PHSA-2023-5.0-0057

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Unzip PHSA-2017-0040

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0040. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid202833;...

CBL Mariner 2.0 Security Update: unzip (CVE-2014-8141)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2014-8141 advisory. - Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote...