Logo
›
›vulnerability›CVE-2014-8140
Name
CVE-2014-8140
Source
NVD ( link)Debian ( link)
Description
Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
CWEs
CWE-787
Published Date
Updated Date
Workaround
-
Advisories
http://www.ocert.org/advisories/ocert-2014-011.htmlThird Party Advisory
http://www.securitytracker.com/id/1031433VDB Entry
https://access.redhat.com/errata/RHSA-2015:0700Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1174851Issue Tracking
http://www.ocert.org/advisories/ocert-2014-011.htmlThird Party Advisory
http://www.securitytracker.com/id/1031433VDB Entry
https://access.redhat.com/errata/RHSA-2015:0700Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1174851Issue Tracking

Analysis#

Affected Component
Analysis
unzip
Patched

Vulnerability Ratings#

7.8
CVSSv31
6.8
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
unzip
buildroot
2025.02.x
6.0
Patched
unzip
yocto
kirkstone
6.0
Patched
unzip
yocto
master
6.0
Patched
unzip
yocto
scarthgap
6.0
Patched

Resolved with patches#

unzip (buildroot:2025.02.x)

#
Title
Author
Resolve
1
Fix CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
"Steven M. Schweda" <sms@antinode.info>
CVE-2014-8140

unzip (buildroot:master)

#
Title
Author
Resolve
1
Fix CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
"Steven M. Schweda" <sms@antinode.info>
CVE-2014-8140

unzip (yocto:kirkstone)

#
Title
Author
Resolve
1
Fix CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
sms
CVE-2014-8140

unzip (yocto:master)

#
Title
Author
Resolve
1
Fix CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
sms
CVE-2014-8140

unzip (yocto:scarthgap)

#
Title
Author
Resolve
1
Fix CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
sms
CVE-2014-8140