1456 matches found
Low: unzip security update
The unzip utility is used to list, test, and extract files from zip archives. Security Fixes: unzip: overlapping of files in ZIP container leads to denial of service CVE-2019-13232 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
Important Photon OS Security Update - PHSA-2020-0083
Updates of 'sqlite', 'unzip', 'systemd', 'ansible', 'openjdk8', 'lz4' packages of Photon OS have been released...
The vulnerability of the Info-ZIP file archiver Unzip, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Info-ZIP unzip file compressor is related to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Important Photon OS Security Update - PHSA-2020-3.0-0083
Updates of 'unzip', 'openjdk8', 'systemd', 'lz4', 'sqlite', 'ansible' packages of Photon OS have been released...
ansible: Extract-Zip function in win_unzip module does not check extracted path
A flaw was found in the Ansible Engine when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path...
ansible: Extract-Zip function in win_unzip module does not check extracted path
A flaw was found in the Ansible Engine when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path...
ansible: Extract-Zip function in win_unzip module does not check extracted path
A flaw was found in the Ansible Engine when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path...
ansible: Extract-Zip function in win_unzip module does not check extracted path
A flaw was found in the Ansible Engine when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path...
Scientific Linux Security Update : unzip on SL7.x x86_64 (20200407)
unzip: overlapping of files in ZIP container leads to denial of service C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135841; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/29";...
EulerOS Virtualization 3.0.2.2 : unzip (EulerOS-SA-2020-1462)
According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow exists in Info-Zip UnZip version = 6.00 in the processing of password-protected archives that allows a...
Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2020-1439)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2020-1462)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-11536
An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the unzip function to rewrite a binary and remotely execute code on a victim's server...
CVE-2020-11536
An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the unzip function to rewrite a binary and remotely execute code on a victim's server...
CVE-2020-11536
CVE-2020-11536 affects ONLYOFFICE Document Server 5.5.0. A maliciously crafted .docx can exploit the unzip function to rewrite a binary and remotely execute code on the server. The connected docs confirm the impact as remote code execution via crafted documents, but do not provide a vendor patch ...
EulerOS 2.0 SP3 : unzip (EulerOS-SA-2020-1439)
According to the version of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service resource consumption, aka a 'better zip...
CentOS 7 : unzip (CESA-2020:1181)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1181 advisory. - unzip: overlapping of files in ZIP container leads to denial of service CVE-2019-13232 Note that Nessus has not tested for this issue but has inste...
unzip security update
CentOS Errata and Security Advisory CESA-2020:1181 An update for unzip is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
