SUSE-SU-2017:0639-1: unzip&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:0639-1 is a vulnerability in unzip&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 06-03-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for unzip This update for unzip fixes the following issues: - CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption (bsc#1013993) - CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to denial of service (bsc#950110) - CVE-2015-7697: Specially crafted zip files could trigger an endless loop and lead to denial of service (bsc#950111) - CVE-2016-9844: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption (bsc#1013992)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- unzip&distro=SUSE Linux Enterprise Server 11 SP4< 6.00-11.17.1
- unzip&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 6.00-11.17.1
1 vendor · 2 products
References
9 links- bugzilla.suse.com/950110REPORT
- bugzilla.suse.com/950111REPORT