Red Hat Security AdvisoryRHSA-2008:0196
unzip security update
Released 2008-03-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 unzip-5.50-36.EL3, unzip-5.50-36.EL3.i386
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 unzip-5.50-31.EL2.1, unzip-5.50-31.EL2.1.i386, unzip-5.50-31.EL2.1.ia64
- Red Hat Enterprise Linux AS version 3 unzip-5.50-36.EL3, unzip-5.50-36.EL3.i386, unzip-5.50-36.EL3.ia64 +1
- Red Hat Enterprise Linux ES version 2.1 unzip-5.50-31.EL2.1, unzip-5.50-31.EL2.1.i386
- Red Hat Enterprise Linux ES version 3 unzip-5.50-36.EL3, unzip-5.50-36.EL3.i386, unzip-5.50-36.EL3.ia64
- Red Hat Enterprise Linux WS version 2.1 unzip-5.50-31.EL2.1, unzip-5.50-31.EL2.1.i386
- Red Hat Enterprise Linux WS version 3 unzip-5.50-36.EL3, unzip-5.50-36.EL3.i386, unzip-5.50-36.EL3.ia64
- Red Hat Linux Advanced Workstation 2.1 unzip-5.50-31.EL2.1, unzip-5.50-31.EL2.1.ia64
Fixes 1 record
Priority MEDIUM 49
The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via u…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0629 · Published 2008-03-17 · Fixed in 6.0 CWE-119
