CVE-2014-9636 unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip arch...
MediumCVSS 5.0
EPSS 11.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/unzip(Debian:12) | < 6.0-15 | 6.0-15 |
| debian/unzip(Debian:13) | < 6.0-15 | 6.0-15 |
| debian/unzip(Debian:14) | < 6.0-15 | 6.0-15 |
| unzip project unzip | = 6.0 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| fedoraproject fedora | = 20 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| alpine/unzip(Alpine:v3.10) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.11) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.12) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.13) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.14) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.15) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.16) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.17) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.18) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.19) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.20) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.21) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.22) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.23) | < 6.0-r3 | 6.0-r3 |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/unzip(Alpine:v3.24) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.5) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.6) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.7) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.8) | < 6.0-r3 | 6.0-r3 |
| alpine/unzip(Alpine:v3.9) | < 6.0-r3 | 6.0-r3 |
References
- Debian Security Tracker CVE-2014-9636 vendor-advisory
- FEDORA-2015-1189 vendor-advisory
- FEDORA-2015-1267 vendor-advisory
- [oss-security] 20141222 Re: CVE Request: Info-ZIP unzip 6.0 mailing-list
- [oss-security] 20141102 unzip -t crasher mailing-list
- [oss-security] 20141103 Re: unzip -t crasher mailing-list
- [oss-security] 20141222 CVE Request: Info-ZIP unzip 6.0 mailing-list
- 62738 third-party-advisory
- 62751 third-party-advisory
- DSA-3152 vendor-advisory
- www.info-zip.org patch vendor-advisory
- www.oracle.com
- 71825 vdb-entry
- USN-2489-1 vendor-advisory
- GLSA-201611-01 vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking