Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-18384: Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12. 99999: CVE-2018-18384 unzip: Buffer overflow in list.c resulting in a denial of service
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | unzip | 0:6.0-20.amzn2 |
| Amazon Linux · 2 | unzip-debuginfo | 0:6.0-20.amzn2 |
Vulnerabilities 1
-
Unscored —
Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compresse…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-18384.html