Lucene search
+L

178 matches found

Prion
Prion
added 2020/01/31 11:15 p.m.32 views

Heap overflow

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

6.8CVSS9.8AI score0.07448EPSS
SaveExploits0References4Affected Software6
OSV
OSV
added 2020/01/31 10:15 p.m.30 views

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS7.8AI score
SaveExploits0References5
OSV
OSV
added 2020/01/31 10:15 p.m.6 views

DEBIAN-CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.6AI score0.07448EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/31 10:15 p.m.22 views

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.2AI score0.07448EPSS
SaveExploits0References4
OSV
OSV
added 2020/01/31 10:15 p.m.8 views

ALPINE-CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.4AI score0.07448EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/31 10:15 p.m.26 views

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.2AI score0.07448EPSS
SaveExploits0References4
Prion
Prion
added 2020/01/31 10:15 p.m.27 views

Heap overflow

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

6.8CVSS9.8AI score0.07448EPSS
SaveExploits0References4Affected Software7
Prion
Prion
added 2020/01/31 10:15 p.m.31 views

Heap overflow

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

6.8CVSS9.8AI score0.07448EPSS
SaveExploits0References4Affected Software7
Debian CVE
Debian CVE
added 2020/01/31 10:08 p.m.33 views

CVE-2014-8141

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS7.9AI score0.07448EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2020/01/31 10:08 p.m.67 views

CVE-2014-8141

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.4AI score0.07448EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/01/31 10:00 p.m.34 views

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8AI score0.07448EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.32 views

Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2019-1627)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.02586EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.24 views

Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2019-2677)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.29968EPSS
SaveExploits2References2
OSV
OSV
added 2020/01/14 2:15 p.m.9 views

CVE-2020-5196

Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden files, list directories, and list files without the permission to zip and download or unzip and upload files. There are multiple ways to bypass certain...

8.1CVSS7.3AI score0.01204EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2019/11/07 12:00 a.m.48 views

Amazon Linux 2 : unzip (ALAS-2019-1355)

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.CVE-2018-18384 C Tenable Network Security, Inc. The descriptive text and packag...

5.5CVSS6.3AI score0.02586EPSS
SaveExploits1References2
Amazon
Amazon
added 2019/11/04 12:00 a.m.46 views

Low: unzip

Issue Overview: Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.CVE-2018-18384 Affected Packages: unzip Note: This advisory is...

5.5CVSS6.4AI score0.02586EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/10/15 12:00 a.m.37 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : unzip Vulnerability (NS-SA-2019-0192)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has unzip packages installed that are affected by a vulnerability: - Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size...

5.5CVSS6.4AI score0.02586EPSS
SaveExploits1References2
CNVD
CNVD
added 2019/07/05 12:00 a.m.4 views

Info-ZIP UnZip Denial of Service Vulnerability (CNVD-2019-21440)

Info-ZIP UnZip is the United States Greg Roelofs software developers of a set of Unix-based platform for the ".zip" file format for decompression tools. A security vulnerability exists in Info-ZIP UnZip version 6.0. An attacker could exploit this vulnerability to cause a denial of service...

3.3CVSS8.1AI score0.00497EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/04 1:15 p.m.7 views

ALPINE-CVE-2019-13232

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service resource consumption, aka a "better zip bomb" issue...

3.3CVSS6.8AI score0.00497EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/04 1:15 p.m.19 views

CVE-2019-13232

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service resource consumption, aka a "better zip bomb" issue...

3.3CVSS3.9AI score0.00497EPSS
SaveExploits0References7
Rows per page
Query Builder