suse · CVE-2014-9913

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2014-9913 severity moderate: SUSE including 14 source package names (unzip-5.52-142.33.1, unzip-6.00-11.17.1, …), 50 product×package rows across 45 product lines (Image SLES12-SP5-Azure-BYOS, Image SLES12-SP5-Azure-Basic-On-Demand, … (45 product lines)): Fixed 50.

Description:

Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.