VDB

DEBIAN-CVE-2021-4217

DEBIAN-CVE-2021-4217 PUBLISHED CVSS 3.299999952316284 LOW

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Risk Scores

CVSS 3.1
3.299999952316284
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected Products

VendorProductVersions
Debian:12unzip0, 0, 0
Debian:11unzip6.0-29, 6.0-26, 6.0-27
Debian:13unzip0, 0, 0
Debian:14unzip0, 0, 0

Timeline

  • Aug 24, 2022 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›