Denial Of Service (DoS)

The unzip utility is used to list, test, or extract files from a zip archive. A buffer overflow was found in the way unzip uncompressed certain extra fields of a file. A specially crafted Zip archive could cause unzip to crash or, possibly, execute arbitrary code when the archive was tested with...

Command Injection

Overview All versions of cocos-utils are vulnerable to Remote Code Execution. The unzip function concatenates user input to exec which may allow attackers to execute arbitrary commands on the server. Recommendation No fix is currently available. Consider using an alternative module until a fix is...

openSUSE Security Update : unzip (openSUSE-2019-1117)

This update for unzip fixes the following issues : - CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE: Security Advisory for unzip (openSUSE-SU-2019:1117-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1117-1 Security update for unzip

This update for unzip fixes the following issues: - CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194 This update was imported from the SUSE:SLE-15:Update update project...

Security update for unzip (moderate)

openSUSE Security Update: Security update for unzip Announcement ID: openSUSE-SU-2019:1117-1 Rating: moderate References: 1110194 Cross-References: CVE-2018-18384 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for unzip fixe...

openSUSE Security Update : unzip (openSUSE-2019-509)

This update for unzip fixes the following issues : - CVE-2014-9636: Prevent denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression bsc914442 -...

SUSE SLES11 Security Update : unzip (SUSE-SU-2019:13984-1)

This update for unzip fixes the following issues : CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED15 / SLES15 Security Update : unzip (SUSE-SU-2019:0707-1)

This update for unzip fixes the following issues : CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

Canarytokens 2019-03-01 - Detection Bypass Exploit

Exploit Title: Canarytokens 2019-03-01 - Detection Bypass Exploit Author: Benjamin Zink Loft, Gionathan "John" Reale Vendor Homepage: https://thinkst.com/ Version: up to 2019-03-01 Software Link: https://github.com/thinkst/canarytokens Google Dork: N/A CVE: 2019-9768...

SUSE-SU-2019:0707-1 Security update for unzip

This update for unzip fixes the following issues: - CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194...

SUSE-SU-2019:13984-1 Security update for unzip

This update for unzip fixes the following issues: - CVE-2018-18384: Fixed a buffer overflow when listing archives bsc1110194...

Canarytokens 2019-03-01 Detection Bypass

Exploit Title: Canarytokens 2019-03-01 - Detection Bypass Date: 20.03.2019 Exploit Author: Benjamin Zink Loft, Gionathan "John" Reale Vendor Homepage: https://thinkst.com/ Version: up to 2019-03-01 Software Link: https://github.com/thinkst/canarytokens Google Dork: N/A CVE: 2019-9768...

Canarytokens 2019-03-01 - Detection Bypass

Canarytokens 2019-03-01 - Detection Bypass Exploit Title: Canarytokens 2019-03-01 - Detection Bypass Date: 20.03.2019 Exploit Author: Benjamin Zink Loft, Gionathan "John" Reale Vendor Homepage: https://thinkst.com/ Version: up to 2019-03-01 Software Link: https://github.com/thinkst/canarytokens...

Canarytokens 2019-03-01 - Detection Bypass

Exploit Title: Canarytokens 2019-03-01 - Detection Bypass Date: 20.03.2019 Exploit Author: Benjamin Zink Loft, Gionathan "John" Reale Vendor Homepage: https://thinkst.com/ Version: up to 2019-03-01 Software Link: https://github.com/thinkst/canarytokens Google Dork: N/A CVE: 2019-9768...

Important Photon OS Security Update - PHSA-2019-0207

Updates of 'unzip', 'gnupg' packages of Photon OS have been released...

Photon OS 2.0: Unzip PHSA-2018-2.0-0052

An update of the unzip package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0052. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121952...

Photon OS 2.0: Unzip PHSA-2019-2.0-0126

An update of the unzip package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0126. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122031...

Photon OS 2.0: Unzip PHSA-2018-2.0-0029

An update of the unzip package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121930...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0126

An update of 'openssh', 'kibana', 'libjpeg-turbo', 'unzip' packages of Photon OS has been released...