unzip -- out of boundary access issues in test_compr_ebentered 2015-02-03
no CVE referenced
CVE details
CVE-2014-9636
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
Matched ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| archivers/unzip | unzip | 6.0_8 | fixed | ehaupt@FreeBSD.org |