1447 matches found
CBL Mariner 2.0 Security Update: unzip (CVE-2018-18384)
The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-18384 advisory. - Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the...
CBL Mariner 2.0 Security Update: unzip (CVE-2015-7697)
The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2015-7697 advisory. - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in ...
CBL Mariner 2.0 Security Update: unzip (CVE-2014-9636)
The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2014-9636 advisory. - unzip 6.0 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via an...
CBL Mariner 2.0 Security Update: unzip (CVE-2008-0888)
The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2008-0888 advisory. - The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers,...
OPENSUSE-SU-2024:11485-1 unzip-6.00-39.1 on GA media
These are all security issues fixed in the unzip-6.00-39.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12357-1 unzip-6.00-40.1 on GA media
These are all security issues fixed in the unzip-6.00-40.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10480-1 unzip-6.00-31.1 on GA media
These are all security issues fixed in the unzip-6.00-31.1 package on the GA media of openSUSE Tumbleweed...
RHEL 9 : unzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unzip: SIGSEGV during the conversion of an utf-8 string to a local string CVE-2022-0530 - A flaw was foun...
RHEL 7 : unzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution CVE-2018-1000035...
RHEL 5 : unzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution CVE-2018-1000035...
RHEL 8 : unzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unzip: SIGSEGV during the conversion of an utf-8 string to a local string CVE-2022-0530 - A flaw was foun...
CLSA-2024-1716917767 unzip: Fix of CVE-2022-0530
CVE-2022-0530: possible flaw occurance during the conversion of a wide string to a local string...
RHEL 6 : unzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution CVE-2018-1000035...
RHEL 7 : unzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution CVE-2018-1000035...
Denial Of Service (DoS)
moodle/moodle is vulnerable to Denial of Service DoS. The vulnerability is due to insufficient file size checks in the file picker's unzip functionality. An attacker can cause a denial of service by uploading specially crafted zip files...
BIT-MOODLE-2024-25978 Msa-24-0001: denial of service risk in file picker unzip functionality
Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...
CVE-2019-13232 affecting package unzip for versions less than 6.0-20
CVE-2019-13232 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...
CVE-2015-7697 affecting package unzip for versions less than 6.0-20
CVE-2015-7697 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...