Logo
vulnerabilityCVE-2015-7696
Name
CVE-2015-7696
Source
NVD ( link)Debian ( link)
Description
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
unzip
Patched

Vulnerability Rating#


6.8
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
6.0
Patched
yocto
kirkstone
6.0
Patched
yocto
master
6.0
Patched
yocto
scarthgap
6.0
Patched

Resolved with patches#


unzip (buildroot:2025.02.x)

#
Title
Author
Resolve
1
Upstream fix for heap overflow
Petr Stodulka <pstodulk@redhat.com>
CVE-2015-7696

unzip (buildroot:master)

#
Title
Author
Resolve
1
Upstream fix for heap overflow
Petr Stodulka <pstodulk@redhat.com>
CVE-2015-7696

unzip (yocto:kirkstone)

#
Title
Author
Resolve
1
upstream fix for heap overflow
Petr Stodulka <pstodulk@redhat.com>
CVE-2015-7696

unzip (yocto:master)

#
Title
Author
Resolve
1
upstream fix for heap overflow
Petr Stodulka <pstodulk@redhat.com>
CVE-2015-7696

unzip (yocto:scarthgap)

#
Title
Author
Resolve
1
upstream fix for heap overflow
Petr Stodulka <pstodulk@redhat.com>
CVE-2015-7696