RHSA-2015:0700 Red Hat Security Advisory: unzip security update

Bulletin has no description...

RHSA-2008:0196 Red Hat Security Advisory: unzip security update

Bulletin has no description...

RHBA-2007:0418 Red Hat Bug Fix Advisory: unzip bug fix update

Bulletin has no description...

RHSA-2007:0203 Red Hat Security Advisory: unzip security and bug fix update

Bulletin has no description...

@c8y/application (>=1019.0.3, <=1019.24.6), @c8y/cli (>=10.0.7, <=1018.510.4) +99 more potentially affected by unknown CVE via unzip-stream (>=0.1.2, <=0.3.1)

unzip-stream NPM version =0.1.2, =1019.0.3, =10.0.7, =1019.0.3, =1019.0.3, =1019.4.8, =1019.4.8, =0.1.0, =0.1.0, =0.6.0, =0.2.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6JRJ-VC65-C983...

GHSA-6JRJ-VC65-C983 unzip-stream allows Arbitrary File Write via artifact extraction

Impact When using the Extract method of unzip-stream, malicious zip files were able to write to paths they shouldn't be allowed to. Patches Fixed in 0.3.2 References - https://snyk.io/research/zip-slip-vulnerability - https://github.com/mhr3/unzip-stream/compare/v0.3.1...v0.3.2 Credits Justin Taf...

PT-2024-40128 · Unknown · Unzip-Stream

Name of the Vulnerable Software and Affected Versions: unzip-stream versions prior to 0.3.2 Description: The issue allows malicious zip files to write to unauthorized paths when using the Extract method of unzip-stream. A researcher from Google, Justin Taft, discovered this issue. Recommendations...

PT-2024-38816 · D Link · Dns-320L +18

Name of the Vulnerable Software and Affected Versions: D-Link DNS-120 up to 20240814 D-Link DNR-202L up to 20240814 D-Link DNS-315L up to 20240814 D-Link DNS-320 up to 20240814 D-Link DNS-320L up to 20240814 D-Link DNS-320LW up to 20240814 D-Link DNS-321 up to 20240814 D-Link DNR-322L up to...

The vulnerability of the unzip method in Toshiba e-STUDIO microprogrammed multifunctional devices allows a perpetrator to execute arbitrary codes, create new files, or overwrite existing ones.

The vulnerability of the unzip method in Toshiba e-STUDIO microprogrammed devices is related to errors in processing the relative path to the catalog. Exploiting this vulnerability allows an attacker to execute arbitrary code, create new files, or overwrite existing ones...

Photon OS 4.0: Unzip PHSA-2023-4.0-0397

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0397. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Unzip PHSA-2023-3.0-0584

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0584. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Unzip PHSA-2023-5.0-0057

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Unzip PHSA-2017-0040

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0040. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid202833;...

CBL Mariner 2.0 Security Update: unzip (CVE-2014-8140)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2014-8140 advisory. - Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attacke...

CBL Mariner 2.0 Security Update: unzip (CVE-2018-1000035)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-1000035 advisory. - A heap-based buffer overflow exists in Info-Zip UnZip version = 6.00 in the processing of password- protect...

CBL Mariner 2.0 Security Update: unzip (CVE-2015-7696)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2015-7696 advisory. - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and...

CBL Mariner 2.0 Security Update: unzip (CVE-2019-13232)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-13232 advisory. - Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service...

CBL Mariner 2.0 Security Update: unzip (CVE-2014-9913)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2014-9913 advisory. - Buffer overflow in the listfiles function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a...

CBL Mariner 2.0 Security Update: unzip (CVE-2014-8141)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2014-8141 advisory. - Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote...

CBL Mariner 2.0 Security Update: unzip (CVE-2015-7697)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2015-7697 advisory. - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in ...