Unzip Project vulnerabilities

Products

• Unzip 16

Newest

• info-zip unzip, fedoraproject fedora, redhat enterprise linux +2 more A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings,... CVE-2021-4217 Fix available 3.3 LowAugust 24, 2022
• info-zip unzip, debian linux, fedoraproject fedora +1 more +3 more A flaw was found in unzip 6.0. The vulnerability occurs during the conversion of wide string to... CVE-2022-0529 Public exploitFix available 5.5 MediumFebruary 9, 2022
• info-zip unzip, apple mac os x, macos +3 more +5 more A flaw was found in unzip 6.0. The vulnerability occurs during the conversion of an utf-8 string... CVE-2022-0530 Fix available 5.5 MediumFebruary 9, 2022
• github.com/yi-ge/unzip, unzip project unzip +1 more Path traversal in github.com/yi-ge/unzip CVE-2020-36561 Fix available 9.1 CriticalApril 14, 2021
• unzip project unzip, debian linux +1 more Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial... CVE-2019-13232 Fix available 3.3 LowJuly 4, 2019
• unzip project unzip Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship... CVE-2018-18384 Fix available 5.5 MediumOctober 16, 2018
• unzip project unzip A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of... CVE-2018-1000035 Fix available EPSS 30.1% 7.8 HighFebruary 9, 2018
• unzip project unzip Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote... CVE-2016-9844 Fix available 4.0 MediumDecember 13, 2016
• unzip project unzip Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote... CVE-2014-9913 Fix available 4.0 MediumDecember 13, 2016
• unzip project unzip, canonical ubuntu linux, debian linux +2 more Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty... CVE-2015-7697 Fix available 4.3 MediumOctober 12, 2015
• unzip project unzip, canonical ubuntu linux, debian linux +2 more Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over... CVE-2015-7696 Fix available 6.8 MediumOctober 12, 2015
• unzip project unzip, canonical ubuntu linux, debian linux +1 more +3 more unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and... CVE-2014-9636 Fix available EPSS 11.9% 5.0 MediumDecember 31, 2014
• info-zip unzip, redhat enterprise linux desktop, enterprise linux server +3 more +5 more Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows... CVE-2014-8141 Fix available 7.8 HighDecember 28, 2014
• info-zip unzip, redhat enterprise linux desktop, enterprise linux server +4 more +6 more Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows... CVE-2014-8140 Fix available 7.8 HighDecember 28, 2014
• info-zip unzip, redhat enterprise linux desktop, enterprise linux server +4 more +6 more Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows... CVE-2014-8139 Fix available 7.8 HighDecember 28, 2014
• info-zip unzip, apple mac os x, canonical ubuntu linux +1 more +3 more The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using... CVE-2008-0888 Fix available 9.3 HighMarch 17, 2008