RHEL 7 : unzip (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution CVE-2018-1000035...

Denial Of Service (DoS)

moodle/moodle is vulnerable to Denial of Service DoS. The vulnerability is due to insufficient file size checks in the file picker's unzip functionality. An attacker can cause a denial of service by uploading specially crafted zip files...

BIT-MOODLE-2024-25978 Msa-24-0001: denial of service risk in file picker unzip functionality

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

CVE-2014-8140 affecting package unzip for versions less than 6.0-20

CVE-2014-8140 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

CVE-2015-7697 affecting package unzip for versions less than 6.0-20

CVE-2015-7697 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

CVE-2014-9636 affecting package unzip for versions less than 6.0-20

CVE-2014-9636 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

CVE-2019-13232 affecting package unzip for versions less than 6.0-20

CVE-2019-13232 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

CVE-2014-8141 affecting package unzip for versions less than 6.0-20

CVE-2014-8141 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

CVE-2014-9913 affecting package unzip for versions less than 6.0-20

CVE-2014-9913 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

CVE-2014-8139 affecting package unzip for versions less than 6.0-20

CVE-2014-8139 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

CVE-2018-18384 affecting package unzip for versions less than 6.0-20

CVE-2018-18384 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

CVE-2015-7696 affecting package unzip for versions less than 6.0-20

CVE-2015-7696 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...

BIT-JENKINS-2021-21689

FilePathunzip and FilePathuntar were not subject to any agent-to-controller access control in Jenkins LTS 2.303.2 and earlier...

Uncontrolled Resource Consumption in moodle

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

GHSA-487G-3M3V-HJHQ Uncontrolled Resource Consumption in moodle

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

Design/Logic Flaw

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

UBUNTU-CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

CVE-2024-25978

CVE-2024-25978 : Moodle is affected by a denial-of-service risk due to insufficient file size checks in the file picker’s unzip functionality. The available connected documents confirm the vulnerability and its impact but do not provide concrete technical details such as affected versions or exac...