CVE-2018-1000035
HIGH7.8EPSS 63.6%unzip - security update
發布日:2018/2/9修改日:2026/4/28
描述
A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution.
受影響套件(3)
- Alpine/unzipfrom 0, < 6.0-r3
- Debian/unzipfrom 0, < 6.0-22
- Debian/unzipfrom 0, < 6.0-16+deb8u6
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.8 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |