CVE-2018-18384 Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is....
MediumCVSS 5.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/unzip(Debian:12) | < 6.0-11 | 6.0-11 |
| debian/unzip(Debian:13) | < 6.0-11 | 6.0-11 |
| debian/unzip(Debian:14) | < 6.0-11 | 6.0-11 |
| unzip project unzip | = 6.0 | No fix listed |
| alpine/unzip(Alpine:v3.11) | < 6.0-r7 | 6.0-r7 |
| alpine/unzip(Alpine:v3.12) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.13) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.14) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.15) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.16) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.17) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.18) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.19) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.20) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.21) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.22) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.23) | < 6.0-r9 | 6.0-r9 |
| alpine/unzip(Alpine:v3.24) | < 6.0-r9 | 6.0-r9 |
References
- Debian Security Tracker CVE-2018-18384 vendor-advisory
- openSUSE-SU-2019:1117 vendor-advisory
- RHSA-2019:2159 vendor-advisory
- bugzilla.suse.com exploit issue-tracking patch third-party-advisory
- sourceforge.net patch third-party-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking