VDB
ALINUX2-SA-2020%3A0044
ALINUX2-SA-2020%3A0044
PUBLISHED
CVSS 4 MEDIUM
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-13232: Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.
Risk Scores
CVSS 3.0
4
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | unzip |
Timeline
- Apr 2, 2020 CVE Published
- Apr 2, 2020 CVE Updated