Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2022-0371
HistoryOct 19, 2022 - 2:14 a.m.

Updated unzip packages fix security vulnerability

2022-10-1902:14:56
Gentoo Foundation
advisories.mageia.org
15
unicode handling
null pointer dereference
specially crafted zip file
code execution
cve-2021-4217
wide string conversion
out-of-bound write
cve-2022-0529
cve-2022-0530
unix

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

54.0%

JSON

Improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. (CVE-2021-4217) Conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. (CVE-2022-0529, CVE-2022-0530)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchunzip< 6.0-2.1unzip-6.0-2.1.mga8

Related

nessus 39
openvas 33
ibm 1
cloudfoundry 1
osv 6
amazon 1
ubuntu 1
debian 2
suse 1
gentoo 1
photon 4
prion 3
nvd 3
veracode 3
cve 3
ubuntucve 3
cnvd 1
cbl_mariner 6
alpinelinux 3
cvelist 3
debiancve 3
redhatcve 3
apple 3
nessus
nessus
RHEL 8 : unzip (Unpatched Vulnerability)
2024-06-03 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : unzip vulnerabilities (USN-5673-1)
2022-10-13 00:00:00
Amazon Linux 2 : unzip (ALAS-2023-1906)
2023-01-24 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0371)
2022-10-19 00:00:00
Ubuntu: Security Advisory (USN-5673-1)
2022-10-14 00:00:00
Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2022-1653)
2022-05-09 00:00:00
ibm
ibm
Security Bulletin: TADDM affected by vulnerabilities in UnZip.
2023-01-05 07:05:24
cloudfoundry
cloudfoundry
USN-5673-1: unzip vulnerabilities | Cloud Foundry
2022-12-07 00:00:00
osv
osv
unzip vulnerabilities
2022-10-13 09:26:04
unzip - security update
2022-09-22 00:00:00
unzip - security update
2022-08-08 00:00:00
amazon
amazon
Low: unzip
2023-01-18 00:16:00
ubuntu
ubuntu
unzip vulnerabilities
2022-10-13 00:00:00
debian
debian
[SECURITY] [DSA 5202-1] unzip security update
2022-08-08 15:26:24
[SECURITY] [DLA 3118-1] unzip security update
2022-09-22 16:54:30
suse
suse
Security update for unzip (moderate)
2022-09-26 00:00:00
gentoo
gentoo
UnZip: Multiple Vulnerabilities
2023-10-30 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-3.0-0584
2023-05-22 00:00:00
Moderate Photon OS Security Update - PHSA-2023-4.0-0397
2023-05-24 00:00:00
Low Photon OS Security Update - PHSA-2022-3.0-0493
2022-11-26 00:00:00
prion
prion
Heap overflow
2022-02-09 23:15:00
Heap overflow
2022-02-09 23:15:00
Null pointer dereference
2022-08-24 16:15:00
nvd
nvd
CVE-2022-0530
2022-02-09 23:15:16
CVE-2021-4217
2022-08-24 16:15:10
CVE-2022-0529
2022-02-09 23:15:16
veracode
veracode
Out-of-bounds Write
2022-08-09 21:57:43
Denial Of Service (DoS)
2022-08-09 22:18:43
Denial Of Service (DoS)
2022-10-17 05:30:01
cve
cve
CVE-2022-0530
2022-02-09 23:15:16
CVE-2022-0529
2022-02-09 23:15:16
CVE-2021-4217
2022-08-24 16:15:10
ubuntucve
ubuntucve
CVE-2022-0530
2022-02-09 00:00:00
CVE-2022-0529
2022-02-09 00:00:00
CVE-2021-4217
2022-08-24 00:00:00
cnvd
cnvd
unzip buffer overflow vulnerability (CNVD-2022-11523)
2022-02-13 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-0530 affecting package unzip 6.0-19
2024-07-06 03:08:36
CVE-2022-0530 affecting package unzip 6.0-20
2024-07-06 03:08:40
CVE-2022-0529 affecting package unzip 6.0-20
2024-07-06 03:08:40
alpinelinux
alpinelinux
CVE-2021-4217
2022-08-24 16:15:10
CVE-2022-0530
2022-02-09 23:15:16
CVE-2022-0529
2022-02-09 23:15:16
cvelist
cvelist
CVE-2022-0530
2022-02-09 22:05:50
CVE-2022-0529
2022-02-09 22:05:51
CVE-2021-4217
2022-08-24 15:08:43
debiancve
debiancve
CVE-2022-0530
2022-02-09 23:15:16
CVE-2022-0529
2022-02-09 23:15:16
CVE-2021-4217
2022-08-24 16:15:10
redhatcve
redhatcve
CVE-2022-0530
2022-02-08 10:16:46
CVE-2022-0529
2022-02-08 09:42:41
CVE-2021-4217
2022-01-27 09:53:53
apple
apple
About the security content of Security Update 2022-004 Catalina
2022-05-16 00:00:00
About the security content of macOS Big Sur 11.6.6
2022-05-16 00:00:00
About the security content of macOS Monterey 12.4
2022-05-16 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

54.0%

JSON
Related for MGASA-2022-0371
nessus39openvas33ibm1cloudfoundry1osv6amazon1ubuntu1debian2suse1gentoo1photon4prion3nvd3veracode3cve3ubuntucve3cnvd1cbl_mariner6alpinelinux3cvelist3debiancve3redhatcve3apple3