3.3

CVE-2019-13232

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Unzip Project ≫ Unzip Version 6.0
Debian ≫ Debian Linux Version 8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.399
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://security.gentoo.org/glsa/202003-58
Third Party Advisory
https://github.com/madler/unzip
Third Party Advisory
Product
Release Notes
https://lists.debian.org/debian-lts-announce/2019/07/msg00005.html
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2019/07/msg00027.html
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190814-0002/
Third Party Advisory
https://support.f5.com/csp/article/K80311892?utm_source=f5support&amp%3Butm_medium=RSS
https://www.bamsoftware.com/hacks/zipbomb/
Third Party Advisory