CVE-2014-9636: Buffer Overflow
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9636?
CVE-2014-9636 is rated as a denial of service vulnerability due to potential crashes caused by out-of-bounds reads or writes.
How do I fix CVE-2014-9636?
To mitigate CVE-2014-9636, update to a patched version of Unzip or apply relevant security patches provided by your Linux distribution.
Which software is affected by CVE-2014-9636?
CVE-2014-9636 affects Unzip version 6.0, as well as specific versions of Ubuntu, Debian, and Fedora.
Can CVE-2014-9636 be exploited remotely?
Yes, CVE-2014-9636 can be exploited remotely by attackers through specially crafted zip files.
What platforms are at risk due to CVE-2014-9636?
CVE-2014-9636 impacts platforms running Unzip 6.0 and various Linux distributions like Ubuntu, Debian, and Fedora.