Ubuntu
unzip package

  1. Bug #1824530
  2. Comment #2

Comment 2 for bug 1824530

Revision history for this message
Mike Salvatore (mikesalvatore) wrote :

Hi Dikkie,

Is this the same vulnerability as reported in CVE-2018-1000035? This CVE also reports a heap-buffer overflow in the UzpPassword function.

Please see https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-1000035.html and https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html for more details.