Red Hat Security Advisory

RHSA-2020:1787

unzip security update

Released 2020-04-28 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) unzip-6.0-43.el8

Fixes 1 record

TI-2019-09916 CVE-2019-13232 · GHSA-8vm7-647w-p9g4

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to…

LOW 17

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00497 Published 2019-07-04 Partial fix CWE-400