CVE-2018-1000034: Critical severity info-zip zip vulnerability
Published Feb 9, 2018
·Updated
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.
Affected Software
1 affected component
Info-ZIP UnZip=6.10c22
Event History
Feb 9, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-1000034?
CVE-2018-1000034 has a medium severity level that can lead to denial of service and potential exposure of sensitive memory.
2
How do I fix CVE-2018-1000034?
To fix CVE-2018-1000034, update Info-ZIP UnZip to a patched version beyond 6.10c22.
3
What type of vulnerability is CVE-2018-1000034?
CVE-2018-1000034 is classified as an out-of-bounds read vulnerability.
4
What software is affected by CVE-2018-1000034?
CVE-2018-1000034 specifically affects Info-ZIP UnZip version 6.10c22.
5
Can CVE-2018-1000034 lead to data exposure?
Yes, CVE-2018-1000034 can allow attackers to read sensitive memory, potentially exposing confidential information.