[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2018-13410 -- zip

ID: oval:org.secpod.oval:def:2000417Date: (C)2019-04-21   (M)2024-04-17
Class: VULNERABILITYFamily: unix




** DISPUTED ** Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value, given that the entire purpose of -TT is execution of arbitrary commands.

Platform:
Debian 8.x
Debian 9.x
Product:
zip
Reference:
CVE-2018-13410
CVE    1
CVE-2018-13410
CPE    3
cpe:/a:info-zip:zip
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x

© SecPod Technologies