OESA-2022-1548

Dashboard / Vulnerabilities / OESA-2022-1548

OESA-2022-1548

Summary: unzip security update

Details: A utility for unpacking zip files. Security Fix(es): A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.(CVE-2022-0530) A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.(CVE-2022-0529)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1548, https://nvd.nist.gov/vuln/detail/CVE-2022-0530, https://nvd.nist.gov/vuln/detail/CVE-2022-0529