CVE

Id
76937  
CVE No.
CVE-2014-9636  
Status
Candidate  
Description
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.  
Phase
Assigned (20150122)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705824 76937 CVE-2014-9636 MLIST:[oss-security] 20141102 unzip -t crasher  View
705825 76937 CVE-2014-9636 URL:http://seclists.org/oss-sec/2014/q4/489  View
705826 76937 CVE-2014-9636 MLIST:[oss-security] 20141103 Re: unzip -t crasher  View
705827 76937 CVE-2014-9636 URL:http://seclists.org/oss-sec/2014/q4/496  View
705828 76937 CVE-2014-9636 MLIST:[oss-security] 20141222 CVE Request: Info-ZIP unzip 6.0  View
705829 76937 CVE-2014-9636 URL:http://seclists.org/oss-sec/2015/q1/216  View
705830 76937 CVE-2014-9636 MLIST:[oss-security] 20141222 Re: CVE Request: Info-ZIP unzip 6.0  View
705831 76937 CVE-2014-9636 URL:http://seclists.org/oss-sec/2014/q4/1131  View
705832 76937 CVE-2014-9636 CONFIRM:http://www.info-zip.org/phpBB3/viewtopic.php?f=7&t=450  View
705833 76937 CVE-2014-9636 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
705834 76937 CVE-2014-9636 DEBIAN:DSA-3152  View
705835 76937 CVE-2014-9636 URL:http://www.debian.org/security/2015/dsa-3152  View
705836 76937 CVE-2014-9636 FEDORA:FEDORA-2015-1189  View
705837 76937 CVE-2014-9636 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148792.html  View
705838 76937 CVE-2014-9636 FEDORA:FEDORA-2015-1267  View
705839 76937 CVE-2014-9636 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148849.html  View
705840 76937 CVE-2014-9636 UBUNTU:USN-2489-1  View
705841 76937 CVE-2014-9636 URL:http://www.ubuntu.com/usn/USN-2489-1  View
705842 76937 CVE-2014-9636 BID:71825  View
705843 76937 CVE-2014-9636 URL:http://www.securityfocus.com/bid/71825  View
705844 76937 CVE-2014-9636 SECUNIA:62738  View
705845 76937 CVE-2014-9636 URL:http://secunia.com/advisories/62738  View
705846 76937 CVE-2014-9636 SECUNIA:62751  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19075 JVNDB-2014-007950 Linux Kernel の Crypto API における任意のカーネルモジュールをロードされる脆弱性 Linux Kernel の Crypto API には、任意のカーネルモジュールをロードされる脆弱性が存在します。 CVE-2014-9644 76937 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007950.html  View