Updated unzip package fixes security vulnerabilities

It was discovered that "unzip -l" CVE-2014-9913 and "zipinfo" CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files...

MGASA-2017-0015 Updated unzip package fixes security vulnerabilities

It was discovered that "unzip -l" CVE-2014-9913 and "zipinfo" CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files...

Info-ZIP UnZip Buffer Overflow Vulnerability

Info-ZIP UnZip is an American software developer Greg Roelofs developed a set of Unix-based platform for the ".zip" file format for decompression tools. A buffer overflow vulnerability exists in Info-ZIP UnZip, where the program fails to perform sufficient bounds checking on user-submitted data,...

Fedora 24 : unzip (2016-80a2fba8aa)

Security fix for CVE-2016-9844 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 25 : unzip (2016-3b4de2babd)

Security fix for CVE-2016-9844 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for unzip FEDORA-2016-3b4de2babd

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for unzip FEDORA-2016-80a2fba8aa

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: unzip-6.0-31.fc24

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

[SECURITY] Fedora 25 Update: unzip-6.0-31.fc25

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

Debian DLA-741-1 : unzip security update

'unzip -l' CVE-2014-9913 and 'zipinfo' CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files. For Debian 7 'Wheezy', these problems have been fixed in version 6.0-8+deb7u6. We recommend that you upgrade your unzip packages. NOTE: Tenable Networ...

[SECURITY] [DLA 741-1] unzip security update

Package : unzip Version : 6.0-8+deb7u6 CVE ID : CVE-2014-9913 CVE-2016-9844 Debian Bug : 847485 847486 "unzip -l" CVE-2014-9913 and "zipinfo" CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files. For Debian 7 "Wheezy", these problems have been...

DLA-741-1 unzip - security update

Bulletin has no description...

Info-ZIP UnZip 'zipinfo.c' Buffer Overflow Vulnerability

UnZip is Info-ZIP an extraction tool that realizes the compression format as .zip. Info-ZIP UnZip suffers from a remote buffer overflow vulnerability that stems from a failure to perform sufficient bounds checking on user input. An attacker could cause a denial of service by exploiting this...

GLSA-201611-01 : UnZip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201611-01 UnZip: Multiple vulnerabilities Multiple vulnerabilities were found in UnZip. Please review the referenced CVEs for additional information. Impact : Remote attackers could execute arbitrary code or cause Denial of Servic...

UnZip: Multiple vulnerabilities

Background Info-ZIP’s UnZip is a tool to list and extract files inside PKZIP compressed files. Description Multiple vulnerabilities were found in UnZip. Please review the referenced CVE’s for additional information. Impact Remote attackers could execute arbitrary code or cause Denial of Service...

openSUSE Security Update : unzip (openSUSE-2016-1188)

This update for unzip fixes the following issues : - CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to denial of service bsc950110 - CVE-2015-7697: Specially crafted zip files could trigger an endless loop and lead to denial of service bsc950111...

Usermode Archive Sandbox: ZipJail

Usermode Archive Sandbox ZipJail is a usermode sandbox for unpacking archives using the unzip , rar , 7z , and unace utilities. Through the use of the tracy library it limits the attack surfaces to an absolute minimum in case a malicious archive tries to exploit known or unknown vulnerabilities i...

Minitar Directory Traversal Vulnerability

Minitar allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot in an extracted filename. Analogous vulnerabilities for unzip and tar: https://www.cvedetails.com/cve/CVE-2001-1268/ and http://www.cvedetails.com/cve/CVE-2001-1267/ Credit: ecneladis...

eXtplorer Directory Traversal Vulnerability

eXtplorer is a PHP-based online file management program that supports online browsing of files and folders as well as logging into FTP servers as an FTP client. A directory traversal vulnerability exists in the unzip/extract functionality of eXtplorer version 2.1.9, which stems from the program...

CVE-2016-4007

Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."...