Red Hat Security AdvisoryRHSA-2020:1181
unzip security update
Released 2020-03-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) unzip-6.0-21.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) unzip-6.0-21.el7
- Red Hat Enterprise Linux Server (v. 7) unzip-6.0-21.el7
- Red Hat Enterprise Linux Workstation (v. 7) unzip-6.0-21.el7
Fixes 1 record
Priority LOW 17
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00497 · Published 2019-07-04 · Partial fix CWE-400
