Red Hat Security Advisory

RHSA-2019:2159

unzip security update

Released 2019-08-06 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) unzip-6.0-20.el7
Red Hat Enterprise Linux ComputeNode (v. 7) unzip-6.0-20.el7
Red Hat Enterprise Linux Server (v. 7) unzip-6.0-20.el7
Red Hat Enterprise Linux Workstation (v. 7) unzip-6.0-20.el7

Fixes 1 record

TI-2018-13000 CVE-2018-18384 · GHSA-jjvf-xm75-cph5

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted…

LOW 30

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.02565 Published 2018-10-16 Partial fix CWE-119