Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 7 MGASA-2021-0033 Critical: Unzip DoS Resource Consumption

mageia
Calendar Grey January 17, 2021
Dist Mageia Esm H88
Revised extraction toolkit addresses vulnerabilities leading to service interruptions, impacting Mageia 7. Release date: 17 Jan 2021.
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue (CVE-2019-13232)

Summary

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue (CVE-2019-13232).

References

- https://bugs.mageia.org/show_bug.cgi?id=25076

- https://access.redhat.com/errata/RHSA-2020:1787

- https://ubuntu.com/security/notices/USN-4672-1

- https://www.cve.org/CVERecord?id=CVE-2019-13232

Topics%20covered

Topics Covered

security advisory denial of service critical exploit package update issue unzip resource consumption Mageia mageia

Resolution

SRPMS

- 7/core/unzip-6.0-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 17 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0033.html
Type: security
CVE: CVE-2019-13232

Topics%20covered

Topics Covered

security advisory denial of service critical exploit package update issue unzip resource consumption Mageia mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here