CVE-2014-9636

Mô tả

Tham khảo

• lists.fedoraproject.org/pipermail/package-announce/2015-January/148792.html
• lists.fedoraproject.org/pipermail/package-announce/2015-January/148849.html
• seclists.org/oss-sec/2014/q4/1131
• seclists.org/oss-sec/2014/q4/489
• seclists.org/oss-sec/2014/q4/496
• seclists.org/oss-sec/2015/q1/216
• secunia.com/advisories/62738
• secunia.com/advisories/62751
• debian.org/security/2015/dsa-3152
• info-zip.org/phpBB3/viewtopic.php · Patch
• oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
• securityfocus.com/bid/71825
• ubuntu.com/usn/USN-2489-1
• security.gentoo.org/glsa/201611-01

Lỗ hổng khác của unzip

• CVE-2020-36561NGHIÊM TRỌNG 9.1Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the tar…
• CVE-2021-4217THẤP 3.3A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereferenc…
• CVE-2022-0530TRUNG BÌNH 5.5A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-…
• CVE-2022-0529TRUNG BÌNH 5.5A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-…
• CVE-2014-8141CAO 7.8Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code …