Buffer overflow in UnZip - CVE-2018-18384

Vulnerability identifier: #VU36542

CSH Severity: Medium

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-18384

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary. A remote attacker can create a specially crafted file, trick the victim into opening it with the affected software, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

UnZip
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Ubuntu
Slackware Linux
Opensuse
Data Computing Appliance (DCA)
unzip (Ubuntu package)
unzip (Red Hat package)

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Data Computing Appliance (DCA) - update to 4.3.0.0
unzip (Ubuntu package) - addressed in versions 6.0-4ubuntu2.6, 6.0-20ubuntu1.1, 6.0-21ubuntu1.1, 6.0-28ubuntu4.1
unzip (Red Hat package) - update to 6.0-20.el7

• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00009.html
• https://access.redhat.com/errata/RHSA-2019:2159
• https://bugzilla.suse.com/show_bug.cgi?id=1110194
• https://sourceforge.net/p/infozip/bugs/53/

• Buffer overflow in Info-ZIP UnZip
• OpenSUSE Linux update for unzip
• Slackware Linux update for infozip
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Red Hat Enterprise Linux 7 update for unzip
• Ubuntu update for unzip