CVE-2015-7697: Medium severity Canonical Ubuntu Linux vulnerability
Published Nov 6, 2015
·Updated
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 data in a ZIP archive.
Affected Software
21 affected componentsFixes available
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.04
Canonical Ubuntu Linux=15.10
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Unzip Project Unzip=6.0
Microsoft azl3 unzip 6.0-20
Microsoft azl3 unzip 6.0-22
Microsoft unzip-6.0-20.azl3.aarch64.rpm
Microsoft cm1 unzip 6.0-15
Microsoft cbl2 unzip 6.0-19
Microsoft unzip-6.0-20.azl3.x86_64.rpm
Microsoft unzip-debuginfo-6.0-19.cm2.aarch64.rpm
Microsoft unzip-6.0-19.cm2.x86_64.rpm
Microsoft unzip-6.0-15.cm1.x86_64.rpm
Microsoft unzip-6.0-19.cm2.aarch64.rpm
Microsoft unzip-debuginfo-6.0-15.cm1.x86_64.rpm
Microsoft unzip-debuginfo-6.0-15.cm1.aarch64.rpm
Microsoft unzip-6.0-15.cm1.aarch64.rpm
Microsoft unzip-debuginfo-6.0-19.cm2.x86_64.rpm
Event History
Nov 6, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Aug 18, 2020
Data Sourced
via Microsoft·12:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·12:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Frequently Asked Questions
1
Is CVE-2015-7697 exploitable remotely?
Yes, CVE-2015-7697 is exploitable remotely, allowing attackers to trigger the vulnerability from outside the target system.