Summary
Michal Zalewski discovered that unzip incorrectly handled certain
malformed zip archives. If a user or automated system were tricked into
processing a specially crafted zip archive, an attacker could possibly
execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | unzip | 6.0-9ubuntu1.2 |
Vulnerabilities 1
-
Unscored —CVE-2014-9636 EPSS 12%
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra fie…
References
-
report
https://ubuntu.com/security/CVE-2014-9636