openwrt ▾
›
master ▾
›
vulnerability
›
CVE-2014-9636
Component Overview
Vulnerability Overview
Name
CVE-2014-9636
Source
NVD (
link
)
Debian (
link
)
Description
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
CWEs
CWE-119
Published Date
Feb 6, 2015
Updated Date
Jun 17, 2026
Workaround
-
Advisories
http://www.info-zip.org/phpBB3/viewtopic.php?f=7&t=450
Patch
http://www.info-zip.org/phpBB3/viewtopic.php?f=7&t=450
Patch
Analysis
#
Affected Component
Analysis
unzip
Patched
Vulnerability Rating
#
5
CVSSv2
Others affected component
#
Name
Project
Project Version
Version
Status
unzip
openwrt
openwrt-25.12
6.0-r9
Patched
Resolved with patches
#
unzip (openwrt:master)
#
Title
Author
Resolve
1
fix: out-of-bounds read or write and crash
OpenWrt community <openwrt-devel@lists.openwrt.org>
CVE-2014-9636
unzip (openwrt:openwrt-25.12)
#
Title
Author
Resolve
1
fix: out-of-bounds read or write and crash
OpenWrt community <openwrt-devel@lists.openwrt.org>
CVE-2014-9636