Unrated

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip...

CVE-2019-13232 First seen on SecPulse Jul 4, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2019-13232 unzip Fixed in: 6.0-r6
Debian DEBIAN-CVE-2019-13232 unzip Fixed in: 6.0-24

Original description The description as published by the source.

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory lists.debian.org
advisory lists.debian.org
advisory security.gentoo.org
advisory security.netapp.com
advisory bamsoftware.com
package github.com
web support.f5.com

Key facts

Severity: Unrated
Published: Jul 4, 2019
First seen on SecPulse: Jul 4, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 22, 11:47