CVE-2018-1000034

Published: 09 February 2018

An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.

Priority

CVSS 3 base score: 9.1

Status

Package	Release	Status
unzip Launchpad, Ubuntu, Debian	Upstream	Needs triage



	Ubuntu 18.04 LTS (Bionic Beaver)	Not vulnerable (see note)
	Ubuntu 16.04 LTS (Xenial Xerus)	Not vulnerable (see note)
	Ubuntu 14.04 ESM (Trusty Tahr)	Not vulnerable (see note)

Author	Note
ratliff	Per report only affects 6.1c22

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.