CVE-2019-13232

Mô tả

Tham khảo

• madler/unzip · Product
• lists.debian.org/debian-lts-announce/2019/07/msg00005.html · Mailing List
• lists.debian.org/debian-lts-announce/2019/07/msg00027.html · Third Party Advisory
• security.gentoo.org/glsa/202003-58 · Third Party Advisory
• security.netapp.com/advisory/ntap-20190814-0002 · Third Party Advisory
• support.f5.com/csp/article/K80311892
• bamsoftware.com/hacks/zipbomb · Third Party Advisory

Lỗ hổng khác của unzip

• CVE-2020-36561NGHIÊM TRỌNG 9.1Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the tar…
• CVE-2021-4217THẤP 3.3A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereferenc…
• CVE-2022-0530TRUNG BÌNH 5.5A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-…
• CVE-2022-0529TRUNG BÌNH 5.5A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-…
• CVE-2014-8141CAO 7.8Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code …