CVE-2018-1000034
published 2018-02-09CVE-2018-1000034: An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.
PriorityP338critical9.1CVSS 3.0
AVNACLPRNUINSUCHINAH
EPSS
1.42%
69.9th percentile
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | unzip | — | — |
| info-zip | unzip | — | — |
CVSS provenance
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
vendor_debian9.1LOW
vendor_redhat9.1CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-33v7-x483-jjjx: An out-of-bounds read exists in Info-Zip UnZip version 6
ghsa_unreviewed·2022-05-14
CVE-2018-1000034 [CRITICAL] CWE-125 GHSA-33v7-x483-jjjx: An out-of-bounds read exists in Info-Zip UnZip version 6
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.
Red Hat
unzip: Invalid access in the LZMA compression algorithm
vendor_redhat·2018-02-07·CVSS 9.1
CVE-2018-1000034 [CRITICAL] CWE-119 unzip: Invalid access in the LZMA compression algorithm
unzip: Invalid access in the LZMA compression algorithm
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.
Statement: This issue did not affect the versions of unzip as shipped with Red Hat Enterprise Linux 5, 6 and 7 as they did not contain vulnerable code.
Package: unzip (Red Hat Enterprise Linux 5) - Not affected
Package: unzip (Red Hat Enterprise Linux 6) - Not affected
Package: unzip (Red Hat Enterprise Linux 7) - Not affected
Package: unzip (Red Hat Enterprise Linux 8) - Not affected
Debian
CVE-2018-1000034: unzip - An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an at...
vendor_debian·2018·CVSS 9.1
CVE-2018-1000034 [CRITICAL] CVE-2018-1000034: unzip - An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an at...
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
2018-02-09
Published