ALPINE-CVE-2018-18384 PUBLISHED CVSS 5.5 MEDIUM

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.

Risk Scores

CVSS v3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.15unzip6.0-r4, 6.0-r8, 6.0-r7
Alpine:v3.21unzip6.0-r1, 6.0-r8, 6.0-r7
Alpine:v3.11unzip6.0-r2, 0, 6.0-r0
Alpine:v3.20unzip0, 6.0-r8, 6.0-r7
Alpine:v3.13unzip6.0-r8, 0, 6.0-r0
Alpine:v3.19unzip6.0-r8, 6.0-r7, 6.0-r6
Alpine:v3.16unzip6.0-r8, 0, 6.0-r0
Alpine:v3.18unzip6.0-r2, 0, 6.0-r0
Alpine:v3.17unzip0, 6.0-r8, 6.0-r7
Alpine:v3.12unzip6.0-r8, 6.0-r7, 6.0-r6
Alpine:v3.14unzip6.0-r4, 6.0-r7, 6.0-r6
Alpine:v3.22unzip0, 6.0-r0, 6.0-r1
Alpine:v3.23unzip0, 6.0-r0, 6.0-r1

Timeline

References

Open in Interactive Console →