Published: 18/01/2017 Updated: 16/12/2019

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4 | Impact Score: 1.4 | Exploitability Score: 2.5

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote malicious users to cause a denial of service (crash) via a large compression method value in the central directory file header.

Vulnerable Product	Search on Vulmon	Subscribe to Product
unzip project unzip 6.0

Debian Bug report logs - #847485 unzip: CVE-2014-9913: buffer overflow in "unzip -l" via list_files() in listc Package: src:unzip; Maintainer for src:unzip is Santiago Vila <sanvila@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 8 Dec 2016 16:33:08 UTC Severity: important Tags: securi ...

Debian Bug report logs - #847486 unzip: CVE-2016-9844: zipinfo buffer overflow Package: src:unzip; Maintainer for src:unzip is Santiago Vila <sanvila@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 8 Dec 2016 16:36:01 UTC Severity: important Tags: security, upstream Found in version un ...

Info-ZIP UnZip 60 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 data in a ZIP archive (CVE-2015-7697) Buffer overflow in the zi_short function in zipinfoc in Info-Zip UnZip 60 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file hea ...

Buffer overflow in the zi_short function in zipinfoc in Info-Zip UnZip 60 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header ...

A buffer overflow in the zi_short function in zipinfoc in Info-Zip UnZip 60 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header ...

CWE-119 https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750 http://www.openwall.com/lists/oss-security/2016/12/05/20 http://www.openwall.com/lists/oss-security/2016/12/05/19 http://www.openwall.com/lists/oss-security/2016/12/05/13 http://www.securityfocus.com/bid/94728 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847485 https://alas.aws.amazon.com/AL2/ALAS-2021-1604.html

CVE-2016-9844

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect