Heap-based buffer overflow in UnZip - CVE-2018-1000035
Published: July 9, 2018
Vulnerability identifier: #VU13614
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-1000035
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.
The weakness exists due to heap-based buffer overflow in the processing of password-protected archives. A remote attacker can trigger memory corruption and cause the service to crash or execute arbitrary code with elevated privileges.
Affected software
UnZip
Gentoo Linux
Ubuntu
Slackware Linux
Opensuse
Fedora
unzip (Alpine package)
unzip (Ubuntu package)
unzip
Gentoo Linux
Ubuntu
Slackware Linux
Opensuse
Fedora
unzip (Alpine package)
unzip (Ubuntu package)
unzip
How to mitigate CVE-2018-1000035
Install update from vendor's website.
unzip (Alpine package) - update to 6.0-r3
unzip (Ubuntu package) - addressed in versions 6.0-4ubuntu2.6, 6.0-20ubuntu1.1, 6.0-21ubuntu1.1, 6.0-28ubuntu4.1
unzip - update to 6.0-37.fc27
unzip (Ubuntu package) - addressed in versions 6.0-4ubuntu2.6, 6.0-20ubuntu1.1, 6.0-21ubuntu1.1, 6.0-28ubuntu4.1
unzip - update to 6.0-37.fc27