Published: 16/10/2018 Updated: 16/12/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

Vulnerable Product	Search on Vulmon	Subscribe to Product
unzip project unzip 6.0

Synopsis Low: unzip security update Type/Severity Security Advisory: Low Topic An update for unzip is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base score, which gives a detaile ...

Info-ZIP UnZip 60 has a buffer overflow in listc, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12(CVE-2018-18384) ...

Info-ZIP UnZip 60 has a buffer overflow in listc, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12 ...

CWE-119 https://sourceforge.net/p/infozip/bugs/53/https://bugzilla.suse.com/show_bug.cgi?id=1110194 http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00009.html https://access.redhat.com/errata/RHSA-2019:2159 https://access.redhat.com/errata/RHSA-2019:2159 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2019-1355.html

CVE-2018-18384

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect