Lucene search
+L

1452 matches found

OSV
OSV
added 2018/10/16 4:50 p.m.7 views

ALPINE-CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS7.3AI score0.02586EPSS
SaveExploits1References1
NVD
NVD
added 2018/10/16 4:50 p.m.20 views

CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS5.8AI score0.02586EPSS
SaveExploits1References4
OSV
OSV
added 2018/10/16 4:50 p.m.10 views

DEBIAN-CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS7.7AI score0.02586EPSS
SaveExploits1References1
Prion
Prion
added 2018/10/16 4:50 p.m.27 views

Buffer overflow

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

4.3CVSS5.7AI score0.02586EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2018/10/16 4:50 p.m.31 views

CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS6.6AI score0.02586EPSS
SaveExploits1References2
OSV
OSV
added 2018/10/16 4:50 p.m.14 views

UBUNTU-CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS6.6AI score0.02586EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
added 2018/10/16 3:00 p.m.59 views

CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS5.4AI score0.02586EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2018/10/16 3:00 p.m.38 views

CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS6.2AI score0.02586EPSS
SaveExploits1
Cvelist
Cvelist
added 2018/10/16 3:00 p.m.35 views

CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.1AI score0.02586EPSS
SaveExploits1References4
CVE
CVE
added 2018/10/16 3:00 p.m.280 views

CVE-2018-18384

CVE-2018-18384 affects Info-ZIP UnZip 6.0. The vulnerability is a buffer overflow in list.c caused by a mismatch between a crafted compressed-size/uncompressed-size relationship and an insufficient buffer (size 10 instead of 12). For some distributions, patched packages exist (e.g., unzip 6.0-20 ...

5.5CVSS5AI score0.02586EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/10/09 12:00 a.m.37 views

openSUSE Security Update : unzip (openSUSE-2018-1124)

This update for unzip fixes the following security issues : - CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption bsc1013993 - CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to...

7.8CVSS7.2AI score0.29968EPSS
SaveExploits2References13
OpenVAS
OpenVAS
added 2018/10/06 12:00 a.m.39 views

openSUSE: Security Advisory for unzip (openSUSE-SU-2018:3043-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.9AI score0.29968EPSS
SaveExploits2References2
OPENSUSE Linux
OPENSUSE Linux
added 2018/10/05 9:18 p.m.84 views

Security update for unzip (moderate)

This update for unzip fixes the following security issues: - CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption bsc1013993 - CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to...

6.8CVSS1.2AI score0.29968EPSS
SaveExploits2References7
RedhatCVE
RedhatCVE
added 2018/10/03 8:49 p.m.23 views

CVE-2018-17828

It was discovered that zziplib is vulnerable to a directory traversal flaw in most of its unzip binaries, including unzip-mem, unzzipcat-mem, unzzipcat-big, unzzipcat-mix, and unzzipcat-zip. An attacker may use this flaw to write files outside the intended target directory, overwriting existing...

5.8CVSS2.8AI score0.01538EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2018/10/03 12:00 a.m.33 views

SUSE SLED12 / SLES12 Security Update : unzip (SUSE-SU-2018:2978-1)

This update for unzip fixes the following security issues : CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption bsc1013993 CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to denia...

7.8CVSS7.2AI score0.29968EPSS
SaveExploits2References20
OSV
OSV
added 2018/09/21 7:29 a.m.7 views

CVE-2018-17297

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive...

7.5CVSS5.9AI score0.02674EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/09/21 6:00 a.m.58 views

CVE-2018-17297

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive...

7.5AI score0.02674EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/09/04 12:00 a.m.10 views

MediaComm Zip-n-Go Buffer Overflow Vulnerability

MediaComm Zip-n-Go is a zip/unzip utility. A buffer overflow vulnerability exists in MediaComm Zip-n-Go versions prior to 4.95, which can be exploited to cause a denial of service or execute arbitrary code with the help of specially crafted files...

9.3CVSS8.1AI score0.04323EPSS
SaveExploits2References1
Fedora
Fedora
added 2018/08/22 12:46 a.m.41 views

[SECURITY] Fedora 27 Update: quazip-0.7.6-1.fc27

QuaZIP is a simple C++ wrapper over Gilles Vollant's ZIP/UNZIP package that can be used to access ZIP archives. It uses Trolltech's Qt toolkit. QuaZIP allows you to access files inside ZIP archives using QIODevice API, and - yes! - that means that you can also use QTextStream, QDataStream or...

5.5CVSS1.4AI score0.0595EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/08/17 12:00 a.m.51 views

Photon OS 1.0: Dhcp / Libtasn1 / Subversion / Unzip PHSA-2016-0013 (deprecated)

An update of subversion, libtasn1, unzip, dhcp packages for PhotonOS has been released. File data PhotonOSPHSA-2016-0013.nasl...

7.1CVSS6.8AI score0.7645EPSS
SaveExploits0References8
Rows per page
Query Builder