CVE-2014-9636
Fixed in a distro release EPSS 12%
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
Products: unzip_project unzip, canonical ubuntu_linux, debian_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | unzip | 6.0-r3 |
| Alpine 3.11 | unzip | 6.0-r3 |
| Alpine 3.12 | unzip | 6.0-r3 |
| Alpine 3.13 | unzip | 6.0-r3 |
| Alpine 3.14 | unzip | 6.0-r3 |
| Alpine 3.15 | unzip | 6.0-r3 |
| Alpine 3.16 | unzip | 6.0-r3 |
| Alpine 3.17 | unzip | 6.0-r3 |
| Alpine 3.18 | unzip | 6.0-r3 |
| Alpine 3.19 | unzip | 6.0-r3 |
| Alpine 3.20 | unzip | 6.0-r3 |
| Alpine 3.21 | unzip | 6.0-r3 |
| Alpine 3.22 | unzip | 6.0-r3 |
| Alpine 3.23 | unzip | 6.0-r3 |
| Alpine 3.24 | unzip | 6.0-r3 |
| Alpine 3.5 | unzip | 6.0-r3 |
| Alpine 3.6 | unzip | 6.0-r3 |
| Alpine 3.7 | unzip | 6.0-r3 |
| Alpine 3.8 | unzip | 6.0-r3 |
| Alpine 3.9 | unzip | 6.0-r3 |
| Debian 12 | unzip | 6.0-15 |
| Debian 13 | unzip | 6.0-15 |
| Debian 14 | unzip | 6.0-15 |
| Debian 6.0 | unzip | 6.0-4+deb6u2 |
| Debian 7 | unzip | 6.0-8+deb7u2 |
| Red Hat Enterprise Linux 6 | unzip | 0:6.0-2.el6_6 |
| Red Hat Enterprise Linux 6 | unzip-debuginfo | 0:6.0-2.el6_6 |
| Red Hat Enterprise Linux 7 | unzip | 0:6.0-15.el7 |
| Red Hat Enterprise Linux 7 | unzip | 0:6.0-15.ael7b |
| Red Hat Enterprise Linux 7 | unzip-debuginfo | 0:6.0-15.el7 |
| Red Hat Enterprise Linux 7 | unzip-debuginfo | 0:6.0-15.ael7b |
| SUSE Linux Enterprise Desktop 12 | unzip | 6.00-32.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | unzip | 6.00-33.8.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | unzip | 6.00-4.3.1 |
| SUSE Linux Enterprise Server 12 | unzip | 6.00-32.1 |
| SUSE Linux Enterprise Server 12 SP3 | unzip | 6.00-33.8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | unzip | 6.00-32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | unzip | 6.00-33.8.1 |
| Ubuntu 14.04 LTS | unzip | 6.0-9ubuntu1.2 |
| openSUSE Tumbleweed | unzip | 6.00-39.1 |