Lucene search
+L

1455 matches found

Photon
Photon
added 2018/03/26 12:00 a.m.39 views

Moderate Photon OS Security Update - PHSA-2018-0029

Updates of 'libtar', 'unzip' packages of Photon OS have been released...

2.1AI score
SaveExploits0
Hacker One
Hacker One
added 2018/03/25 3:00 p.m.26 views

Mapbox: Test-scripts for postgis in mason-repository using unsafe unzip of content from unclaimed bucket creates potential RCE-issues

On March 25, 2018 @fransrosen reported a vulnerability to Mapbox. An AWS S3 bucket previously owned by Mapbox was reclaimed by this researcher, which is possible due to the global namespacing of S3 buckets. This bucket was still actively referenced in a test script. The bucket takeover therefore...

1.1AI score
SaveExploits0
Photon
Photon
added 2018/03/23 12:00 a.m.33 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0029

An update of 'unzip', 'libtar' packages of Photon OS has been released...

5.8CVSS0.9AI score0.03277EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2018/03/14 12:00 a.m.31 views

Fedora Update for unzip FEDORA-2018-ab3d1d78f3

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.29968EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2018/03/07 12:00 a.m.35 views

Fedora 27 : unzip (2018-ab3d1d78f3)

Fix CVE-2018-1000035 - heap based buffer overflow when opening Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

7.8CVSS7.7AI score0.29968EPSS
SaveExploits2References3
Fedora
Fedora
added 2018/03/06 5:36 p.m.39 views

[SECURITY] Fedora 27 Update: unzip-6.0-37.fc27

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

7.8CVSS1.4AI score0.29968EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2018/02/20 12:00 a.m.40 views

SUSE SLES11 Security Update : unzip (SUSE-SU-2018:0465-1)

This update for unzip fixes the following issues : - CVE-2018-1000035: Fixed a heap-based buffer overflow in password protected ZIP archives bsc1080074 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

7.8CVSS7.7AI score0.29968EPSS
SaveExploits2References4
OSV
OSV
added 2018/02/16 3:00 p.m.9 views

SUSE-SU-2018:0465-1 Security update for unzip

This update for unzip fixes the following issues: - CVE-2018-1000035: Fixed a heap-based buffer overflow in password protected ZIP archives bsc1080074...

7.8CVSS8.1AI score0.29968EPSS
SaveExploits2References3
CNVD
CNVD
added 2018/02/11 12:00 a.m.20 views

InfoZip UnZip Heap Buffer Overflow Vulnerability

UnZip is a utility for extracting compressed files also known as "zipfiles" in .zip format. A heap buffer overflow vulnerability exists in InfoZip UnZip 6.10c22. An attacker could exploit this vulnerability to cause a denial of service or possibly enable code execution...

7.8CVSS7.9AI score0.01252EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/02/11 12:00 a.m.17 views

InfoZip UnZip Heap Out-of-Bounds Write Vulnerability

UnZip is a utility for extracting compressed files also known as "zipfiles" in .zip format. A heap out-of-bounds write vulnerability exists in InfoZip UnZip 6.10c22. An attacker could exploit this vulnerability to cause a denial of service...

7.8CVSS6.9AI score0.0132EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/02/11 12:00 a.m.9 views

InfoZip UnZip heap buffer overflow vulnerability (CNVD-2018-03770)

UnZip is a utility for extracting compressed files also known as "zipfiles" in .zip format. A heap buffer overflow vulnerability exists in InfoZip UnZip 6.00 and prior versions in the handling of password-protected archive files. An attacker could exploit this vulnerability to cause a denial of...

7.8CVSS8.4AI score0.29968EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/02/11 12:00 a.m.12 views

InfoZip UnZip Out-of-Bounds Read Vulnerability

UnZip is a utility for extracting compressed files also known as "zipfiles" in .zip format. An out-of-bounds read vulnerability exists in InfoZip UnZip 6.10c22. An attacker could use this vulnerability to cause a denial of service and read sensitive memory...

9.1CVSS6.7AI score0.01733EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/02/11 12:00 a.m.13 views

InfoZip UnZip out-of-bounds read vulnerability (CNVD-2018-03771)

UnZip is a utility for extracting compressed files also known as "zipfiles" in .zip format. An out-of-bounds read vulnerability exists in InfoZip UnZip 6.10c22. An attacker could use this vulnerability to cause a denial of service and read sensitive memory...

9.1CVSS6.7AI score0.01418EPSS
SaveExploits2References1
OSV
OSV
added 2018/02/09 11:29 p.m.7 views

CVE-2018-1000034

An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory...

9.1CVSS5.8AI score0.01418EPSS
SaveExploits2References2
OSV
OSV
added 2018/02/09 11:29 p.m.15 views

AZL-6941 CVE-2018-1000035 affecting package unzip for versions less than 6.0-19

A heap-based buffer overflow exists in Info-Zip UnZip version = 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution...

7.8CVSS7.6AI score0.29968EPSS
SaveExploits2References1
NVD
NVD
added 2018/02/09 11:29 p.m.27 views

CVE-2018-1000032

A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution...

7.8CVSS7.9AI score0.01252EPSS
SaveExploits2References1
NVD
NVD
added 2018/02/09 11:29 p.m.30 views

CVE-2018-1000033

An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory...

9.1CVSS9AI score0.01733EPSS
SaveExploits2References2
OSV
OSV
added 2018/02/09 11:29 p.m.11 views

AZL-35339 CVE-2018-1000035 affecting package unzip for versions less than 6.0-20

A heap-based buffer overflow exists in Info-Zip UnZip version = 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution...

7.8CVSS7.6AI score0.29968EPSS
SaveExploits2References1
OSV
OSV
added 2018/02/09 11:29 p.m.7 views

ALPINE-CVE-2018-1000035

A heap-based buffer overflow exists in Info-Zip UnZip version = 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution...

7.8CVSS8AI score0.29968EPSS
SaveExploits2References1
OSV
OSV
added 2018/02/09 11:29 p.m.7 views

CVE-2018-1000031

A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution...

7.8CVSS6.1AI score0.0132EPSS
SaveExploits2References1
Rows per page
Query Builder