{"id":"CVE-2018-18384","aliases":["ALPINE-CVE-2018-18384","AZL-35340","AZL-6942","BELL-CVE-2018-18384","DEBIAN-CVE-2018-18384","EUVD-2018-10115","GHSA-jjvf-xm75-cph5","RHSA-2019:2159","SUSE-SU-2019:0707-1","SUSE-SU-2019:13984-1","SUSE-SU-2020:1796-1","UBUNTU-CVE-2018-18384","USN-4672-1","openSUSE-SU-2019:1117-1","openSUSE-SU-2024:11485-1"],"status":"published","title":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship...","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02565,"percentile":0.85238,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2018-10-16T15:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"unzip","fixed_in":["6.0-r9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"unzip","fixed_in":["6.0-20"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"unzip","fixed_in":["6.0-19"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"unzip","fixed_in":["6.0-11"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"unzip","fixed_in":["6.0-11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"unzip","fixed_in":["6.0-11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"unzip","fixed_in":["0:6.0-20.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"unzip-debuginfo","fixed_in":["0:6.0-20.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unzip","fixed_in":["0:6.0-20.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unzip-debuginfo","fixed_in":["0:6.0-20.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"unzip","fixed_in":["0:6.0-20.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"unzip-debuginfo","fixed_in":["0:6.0-20.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unzip","fixed_in":["0:6.0-20.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unzip-debuginfo","fixed_in":["0:6.0-20.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"unzip","fixed_in":["6.00-4.8.13"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"unzip","fixed_in":["6.00-11.18.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"unzip","fixed_in":["6.00-11.18.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"unzip","fixed_in":["6.00-33.13.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"unzip","fixed_in":["6.00-33.13.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"unzip","fixed_in":["6.00-33.13.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"unzip","fixed_in":["6.00-33.13.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"unzip","fixed_in":["6.0-9ubuntu1.6"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"unzip","fixed_in":["6.00-lp150.8.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"unzip-rcc","fixed_in":["6.00-lp150.8.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-20"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-19"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-11"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-11"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-4.8.13"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-11.18.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-11.18.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-33.13.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-33.13.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-33.13.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-33.13.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-9ubuntu1.6"}]}],"versions":["6.0-9ubuntu1","6.0-9ubuntu1.1","6.0-9ubuntu1.2","6.0-9ubuntu1.3","6.0-9ubuntu1.4","6.0-9ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-9ubuntu1.6"}]}],"versions":["6.0-9ubuntu1","6.0-9ubuntu1.1","6.0-9ubuntu1.2","6.0-9ubuntu1.3","6.0-9ubuntu1.4","6.0-9ubuntu1.5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-20ubuntu1.1"}]}],"versions":["6.0-17ubuntu1","6.0-19ubuntu1","6.0-19ubuntu2","6.0-20ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-21ubuntu1.1"}]}],"versions":["6.0-21ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-lp150.8.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"unzip-rcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-lp150.8.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.00-39.1"}]}],"bundled":5}],"products":[{"vendor":"unzip_project","product":"unzip"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1110194","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://sourceforge.net/p/infozip/bugs/53/","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2159","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18384","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-jjvf-xm75-cph5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-18384","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-18384","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-18384","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642931","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2159.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18384","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190707-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1110194","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18384","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913984-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201796-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-18384","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4672-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13232","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6HNVQQPPRQ5M2FBHS267R3I6SNXVU4PA/#6HNVQQPPRQ5M2FBHS267R3I6SNXVU4PA","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-2475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000035","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-18384","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T15:00:00Z","modified":"2024-08-05T11:08:21.792Z","updated_at":"2026-11-02T14:35:11.799349Z"}],"euvd":[{"id":"EUVD-2018-10115","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T15:00:00Z","modified":"2024-08-05T11:08:21Z","updated_at":"2026-11-03T02:39:36.317092Z"}],"ghsa":[{"id":"GHSA-jjvf-xm75-cph5","title":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship...","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2022-05-13T01:30:16Z","modified":"2023-02-01T05:07:51Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:50:37.729708Z"}],"nvd":[{"id":"CVE-2018-18384","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T16:50:12.773Z","modified":"2026-06-17T01:47:07.087Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:44.873741Z"}],"osv":[{"id":"ALPINE-CVE-2018-18384","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T16:50:12.773Z","modified":"2026-10-23T17:17:55.2336178Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"AZL-35340","title":"CVE-2018-18384 affecting package unzip for versions less than 6.0-20","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T16:50:12Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-6942","title":"CVE-2018-18384 affecting package unzip for versions less than 6.0-19","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T16:50:12Z","modified":"2026-04-21T04:38:35.791524Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"BELL-CVE-2018-18384","title":"CVE-2018-18384 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:45.79698Z","modified":"2026-01-26T09:49:10.569238Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-18384","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T16:50:12.773Z","modified":"2026-03-14T09:28:31.701693Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.834469Z"},{"id":"DEBIAN-CVE-2018-18384","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T16:50:12.773Z","modified":"2026-10-23T18:04:47.230388704Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"RHSA-2019:2159","title":"Red Hat Security Advisory: unzip security update","status":"published","published":"2024-09-16T02:12:08Z","modified":"2026-06-26T10:43:02Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-18384","description":"Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.","status":"published","published":"2018-10-16T16:50:00Z","modified":"2026-02-04T02:36:24.702411Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"openSUSE-SU-2019:1117-1","title":"Security update for unzip","description":"This update for unzip fixes the following issues:\n\n- CVE-2018-18384: Fixed a buffer overflow when listing archives (bsc#1110194)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-02T11:05:11Z","modified":"2026-02-04T03:38:07.267784Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11485-1","title":"unzip-6.00-39.1 on GA media","description":"These are all security issues fixed in the unzip-6.00-39.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:07:40.428489Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:0707-1","title":"Security update for unzip","description":"This update for unzip fixes the following issues:\n\n- CVE-2018-18384: Fixed a buffer overflow when listing archives (bsc#1110194)\n","status":"published","published":"2019-03-22T12:32:11Z","modified":"2026-02-04T04:25:06.595309Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:13984-1","title":"Security update for unzip","description":"This update for unzip fixes the following issues:\n\n- CVE-2018-18384: Fixed a buffer overflow when listing archives (bsc#1110194)\n","status":"published","published":"2019-03-21T17:39:52Z","modified":"2026-02-04T04:30:21.634919Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2020:1796-1","title":"Security update for unzip","description":"This update for unzip fixes the following issues:\n\n- CVE-2018-18384: Fixed a buffer overflow when listing files (bsc#1110194)\n\n","status":"published","published":"2020-06-29T11:28:07Z","modified":"2026-02-04T03:30:19.0856Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4672-1","title":"unzip vulnerabilities","description":"Rene Freingruber discovered that unzip incorrectly handled certain\nspecially crafted password protected ZIP archives. If a user or automated\nsystem using unzip were tricked into opening a specially crafted zip file,\nan attacker could exploit this to cause a crash, resulting in a denial of\nservice. (CVE-2018-1000035)\n\nAntonio Carista discovered that unzip incorrectly handled certain\nspecially crafted ZIP archives. If a user or automated system using unzip\nwere tricked into opening a specially crafted zip file, an attacker could\nexploit this to cause a crash, resulting in a denial of service. This\nissue only affected Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n(CVE-2018-18384)\n\nIt was discovered that unzip incorrectly handled certain specially crafted\nZIP archives. If a user or automated system using unzip were tricked into\nopening a specially crafted zip file, an attacker could exploit this to\ncause resource consumption, resulting in a denial of service.\n(CVE-2019-13232)\n\nMartin Carpenter discovered that unzip incorrectly handled certain\nspecially crafted ZIP archives. If a user or automated system using unzip\nwere tricked into opening a specially crafted zip file, an attacker could\nexploit this to cause a crash, resulting in a denial of service. This\nissue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04\nLTS. (CVE-2014-9913)\n\nAlexis Vanden Eijnde discovered that unzip incorrectly handled certain\nspecially crafted ZIP archives. If a user or automated system using unzip\nwere tricked into opening a specially crafted zip file, an attacker could\nexploit this to cause a crash, resulting in a denial of service. This\nissue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04\nLTS. (CVE-2016-9844)\n","status":"published","published":"2020-12-16T17:27:07Z","modified":"2026-06-29T13:48:08.480259798Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}