{"id":"CVE-2019-13232","aliases":["ALPINE-CVE-2019-13232","AZL-35341","AZL-6943","BELL-CVE-2019-13232","DEBIAN-CVE-2019-13232","DLA-1846-1","EUVD-2019-4743","GHSA-8vm7-647w-p9g4","MGASA-2021-0033","RHSA-2020:1181","RHSA-2020:1787","RHSA-2020:2486","UBUNTU-CVE-2019-13232","USN-4672-1"],"status":"published","title":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial...","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00497,"percentile":0.42873,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2019-07-04T12:03:06Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"unzip","fixed_in":["6.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"unzip","fixed_in":["6.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"unzip","fixed_in":["6.0-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"unzip","fixed_in":["6.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"unzip","fixed_in":["6.0-r6"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"unzip","fixed_in":["6.0-20"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"unzip","fixed_in":["6.0-19"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"unzip","fixed_in":["6.0-24"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"unzip","fixed_in":["6.0-24"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"unzip","fixed_in":["6.0-24"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"unzip","fixed_in":["6.0-16+deb8u4"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"unzip","fixed_in":["6.0-1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"unzip","fixed_in":["0:6.0-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"unzip-debuginfo","fixed_in":["0:6.0-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unzip","fixed_in":["0:6.0-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unzip-debuginfo","fixed_in":["0:6.0-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"unzip","fixed_in":["0:6.0-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"unzip-debuginfo","fixed_in":["0:6.0-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unzip","fixed_in":["0:6.0-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unzip-debuginfo","fixed_in":["0:6.0-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"unzip","fixed_in":["0:6.0-43.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"unzip-debuginfo","fixed_in":["0:6.0-43.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"unzip-debugsource","fixed_in":["0:6.0-43.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unzip","fixed_in":["0:6.0-20.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unzip-debuginfo","fixed_in":["0:6.0-20.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unzip","fixed_in":["0:6.0-20.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unzip-debuginfo","fixed_in":["0:6.0-20.el7_7.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"unzip","fixed_in":["6.0-9ubuntu1.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"unzip","fixed_in":["6.0-20ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"unzip","fixed_in":["6.0-21ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-r6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-20"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-19"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-24"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-24"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-24"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-16+deb8u4"}]}],"versions":["6.0-16","6.0-16+deb8u1","6.0-16+deb8u2","6.0-16+deb8u3"]},{"source":"osv","ecosystem":"Mageia:7","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-43.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-43.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"unzip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-43.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0-20.el7_7.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-9ubuntu1.6"}]}],"versions":["6.0-9ubuntu1","6.0-9ubuntu1.1","6.0-9ubuntu1.2","6.0-9ubuntu1.3","6.0-9ubuntu1.4","6.0-9ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-20ubuntu1.1"}]}],"versions":["6.0-17ubuntu1","6.0-19ubuntu1","6.0-19ubuntu2","6.0-20ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-21ubuntu1.1"}]}],"versions":["6.0-21ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-9ubuntu1.6"}]}],"versions":["6.0-9ubuntu1","6.0-9ubuntu1.1","6.0-9ubuntu1.2","6.0-9ubuntu1.3","6.0-9ubuntu1.4","6.0-9ubuntu1.5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-20ubuntu1.1"}]}],"versions":["6.0-17ubuntu1","6.0-19ubuntu1","6.0-19ubuntu2","6.0-20ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"unzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-21ubuntu1.1"}]}],"versions":["6.0-21ubuntu1"],"bundled":5}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"unzip_project","product":"unzip"}],"references":[{"url":"https://www.bamsoftware.com/hacks/zipbomb/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/madler/unzip","tags":["x_refsource_MISC","x_transferred","Product","Release Notes","Third Party Advisory","package"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/07/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/07/msg00027.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190814-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.f5.com/csp/article/K80311892?utm_source=f5support\u0026amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202003-58","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13232","tags":["web","advisory"]},{"url":"https://support.f5.com/csp/article/K80311892?utm_source=f5support\u0026amp;utm_medium=RSS"},{"url":"https://security.netapp.com/advisory/ntap-20190814-0002"},{"url":"https://www.bamsoftware.com/hacks/zipbomb"},{"url":"https://github.com/advisories/GHSA-8vm7-647w-p9g4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-13232","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-13232","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-13232","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0033.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25076","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1787","tags":["web","advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4672-1","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1181","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727761","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1181.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13232","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1787.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2486","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2486.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-13232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000035","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-13232","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T12:03:06Z","modified":"2024-08-04T23:49:23.565Z","updated_at":"2026-11-02T14:20:24.357095Z"}],"euvd":[{"id":"EUVD-2019-4743","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T12:03:06Z","modified":"2024-08-04T23:49:23Z","updated_at":"2026-11-03T02:40:43.368399Z"}],"ghsa":[{"id":"GHSA-8vm7-647w-p9g4","title":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial...","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2022-05-24T16:49:29Z","modified":"2024-04-04T01:11:32Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:55:55.605227Z"}],"nvd":[{"id":"CVE-2019-13232","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T13:15:10.75Z","modified":"2026-06-17T02:16:20.47Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:05:19.195714Z"}],"osv":[{"id":"ALPINE-CVE-2019-13232","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T13:15:10.75Z","modified":"2026-09-21T06:17:52.476438171Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"AZL-35341","title":"CVE-2019-13232 affecting package unzip for versions less than 6.0-20","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T13:15:10Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-6943","title":"CVE-2019-13232 affecting package unzip for versions less than 6.0-19","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T13:15:10Z","modified":"2026-04-21T04:38:36.012131Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"BELL-CVE-2019-13232","title":"CVE-2019-13232 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:38.88558Z","modified":"2026-01-26T09:48:50.716745Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-13232","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T13:15:10.75Z","modified":"2026-10-22T02:47:42.064059125Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-13232","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T13:15:10.75Z","modified":"2026-09-21T07:03:04.604329683Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"RHSA-2020:1181","title":"Red Hat Security Advisory: unzip security update","status":"published","published":"2024-09-16T03:02:31Z","modified":"2026-06-26T10:47:14Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1787","title":"Red Hat Security Advisory: unzip security update","status":"published","published":"2024-09-16T03:02:39Z","modified":"2025-11-22T12:00:26Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2486","title":"Red Hat Security Advisory: unzip security update","status":"published","published":"2024-09-16T03:02:47Z","modified":"2026-06-26T10:48:46Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2019-13232","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue.","status":"published","published":"2019-07-04T13:15:00Z","modified":"2026-02-04T04:10:54.89661Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"DLA-1846-1","title":"unzip - security update","status":"published","published":"2019-07-07T00:00:00Z","modified":"2026-03-09T01:21:47.008909Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"MGASA-2021-0033","title":"Updated unzip package fixes a security vulnerability","description":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container,\nleading to denial of service (resource consumption), aka a \"better zip bomb\"\nissue (CVE-2019-13232).\n","status":"published","published":"2021-01-17T16:07:01Z","modified":"2026-04-16T04:43:57.403267633Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"USN-4672-1","title":"unzip vulnerabilities","description":"Rene Freingruber discovered that unzip incorrectly handled certain\nspecially crafted password protected ZIP archives. If a user or automated\nsystem using unzip were tricked into opening a specially crafted zip file,\nan attacker could exploit this to cause a crash, resulting in a denial of\nservice. (CVE-2018-1000035)\n\nAntonio Carista discovered that unzip incorrectly handled certain\nspecially crafted ZIP archives. If a user or automated system using unzip\nwere tricked into opening a specially crafted zip file, an attacker could\nexploit this to cause a crash, resulting in a denial of service. This\nissue only affected Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n(CVE-2018-18384)\n\nIt was discovered that unzip incorrectly handled certain specially crafted\nZIP archives. If a user or automated system using unzip were tricked into\nopening a specially crafted zip file, an attacker could exploit this to\ncause resource consumption, resulting in a denial of service.\n(CVE-2019-13232)\n\nMartin Carpenter discovered that unzip incorrectly handled certain\nspecially crafted ZIP archives. If a user or automated system using unzip\nwere tricked into opening a specially crafted zip file, an attacker could\nexploit this to cause a crash, resulting in a denial of service. This\nissue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04\nLTS. (CVE-2014-9913)\n\nAlexis Vanden Eijnde discovered that unzip incorrectly handled certain\nspecially crafted ZIP archives. If a user or automated system using unzip\nwere tricked into opening a specially crafted zip file, an attacker could\nexploit this to cause a crash, resulting in a denial of service. This\nissue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04\nLTS. (CVE-2016-9844)\n","status":"published","published":"2020-12-16T17:27:07Z","modified":"2026-06-29T13:48:08.480259798Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}