Unscored DLA-150-1 2 CVEs

unzip - security update

Published Feb 7, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	unzip	6.0-4+deb6u2

Vulnerabilities 2

Unscored —

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execu…

Info-ZIP UnZip unzip unzip Debian Ubuntu Azure Linux Alpine

Jan 31, 2020
Unscored —

CVE-2014-9636 EPSS 12%

unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra fie…

unzip unzip unzip unzip Debian Ubuntu Azure Linux Alpine

Feb 6, 2015