Medium ELSA-2015-0700 4 CVEs

Moderate: unzip security update (Oracle Linux 7)

Published Mar 18, 2015 · Updated Mar 18, 2015

Ecosystem: Oracle Linux

Summary

[6.0-2]
- Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
Resolves: #1196132 #1196120 #1196124 #1196128

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	unzip	0:6.0-15.el7

Vulnerabilities 4

Unscored —

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execu…

Info-ZIP UnZip unzip unzip Debian Ubuntu Azure Linux Alpine

Jan 31, 2020
Unscored —

CVE-2014-8140

Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to e…

Info-ZIP UnZip unzip unzip Debian Ubuntu Azure Linux Alpine

Jan 31, 2020
Unscored —

CVE-2014-8141

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to ex…

Info-ZIP UnZip unzip unzip Debian Ubuntu Azure Linux Alpine

Jan 31, 2020
Unscored —

CVE-2014-9636 EPSS 12%

unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra fie…

unzip unzip unzip unzip Debian Ubuntu Azure Linux Alpine

Feb 6, 2015