Lucene search
IBMDEBC899D5E7F52BAC830D06EFF16A64417FA7A826DA06C927EAAEEF2964D3F82HistoryJun 08, 2021 - 10:33 p.m.
Security Bulletin: IBM DataPower Gateway may allow a potential DoS when importing malicious ZIP files (CVE-2019-13232)
2021-06-0822:33:53
www.ibm.com
43
ibm
datapower gateway
dos
vulnerability
zip files
cve-2019-13232
EPSS
0.001
Percentile
33.2%
Summary
IBM has addressed CVE-2019-13232
Vulnerability Details
CVEID:CVE-2019-13232
**DESCRIPTION:**Info-ZIP UnZip is vulnerable to a denial of service, caused by mishandling the overlapping of files inside a ZIP container. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to cause resource consumption.
CVSS Base score: 3.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/166873 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM DataPower Gateway | 2018.4.1.0-2018.4.1.12 |
Remediation/Fixes
| Affected Product(s) | Fixed in Version | APAR |
|---|---|---|
| IBM DataPower Gateway | 2018.4.1.13 | IT32966 |
Workarounds and Mitigations
None
Related
prion
prion
Design/Logic Flaw
2019-07-04 13:15:00
nessus
nessus
AlmaLinux 8 : unzip (ALSA-2020:1787)
2022-02-09 00:00:00
Photon OS 1.0: Unzip PHSA-2019-1.0-0246
2019-08-26 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : unzip Vulnerability (NS-SA-2020-0098)
2020-12-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-01 00:38:39
redhat
redhat
(RHSA-2020:1787) Low: unzip security update
2020-04-28 09:16:24
(RHSA-2020:1181) Low: unzip security update
2020-03-31 09:29:08
(RHSA-2020:2486) Low: unzip security update
2020-06-10 15:00:54
debiancve
debiancve
CVE-2019-13232
2019-07-04 13:15:10
ubuntucve
ubuntucve
CVE-2019-13232
2019-07-04 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2020-1671)
2020-06-16 00:00:00
Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2020-1137)
2020-02-24 00:00:00
Debian: Security Advisory (DLA-1846-1)
2019-07-08 00:00:00
osv
osv
unzip - security update
2019-07-07 00:00:00
CVE-2019-13232
2019-07-04 13:15:10
unzip vulnerabilities
2020-12-16 17:27:07
oraclelinux
oraclelinux
unzip security update
2020-05-05 00:00:00
unzip security update
2020-04-06 00:00:00
mageia
mageia
Updated unzip package fixes a security vulnerability
2021-01-17 19:07:01
cve
cve
CVE-2019-13232
2019-07-04 13:15:10
centos
centos
unzip security update
2020-04-08 20:06:45
cbl_mariner
cbl_mariner
CVE-2019-13232 affecting package unzip for versions less than 6.0-20
2024-03-19 17:21:46
CVE-2019-13232 affecting package unzip 6.0-19
2020-11-30 19:30:40
CVE-2019-13232 affecting package unzip for versions less than 6.0-19
2022-04-09 06:51:51
almalinux
almalinux
Low: unzip security update
2020-04-28 09:16:24
debian
debian
[SECURITY] [DLA 1846-2] unzip regression update
2019-07-28 22:40:22
[SECURITY] [DLA 1846-1] unzip security update
2019-07-07 20:09:22
amazon
amazon
Low: unzip
2020-10-22 18:43:00
redhatcve
redhatcve
CVE-2019-13232
2019-07-08 06:51:23
alpinelinux
alpinelinux
CVE-2019-13232
2019-07-04 13:15:10
cvelist
cvelist
CVE-2019-13232
2019-07-04 12:03:06
ibm
ibm
nvd
nvd
CVE-2019-13232
2019-07-04 13:15:10
f5
f5
K80311892 : InfoZIP vulnerability CVE-2019-13232
2019-10-17 00:00:00
gentoo
gentoo
UnZip: User-assisted execution of arbitrary code
2020-03-26 00:00:00
ubuntu
ubuntu
unzip vulnerabilities
2020-12-16 00:00:00
cloudfoundry
cloudfoundry
USN-4672-1: unzip vulnerabilities | Cloud Foundry
2021-02-10 00:00:00
photon
photon
EPSS
0.001
Percentile
33.2%
Related for DEBC899D5E7F52BAC830D06EFF16A64417FA7A826DA06C927EAAEEF2964D3F82