https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T15:27:54.386588+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-9636 CVE-2014-9636 2026-09-29T15:27:54.414271+00:00

unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.

 https://vulnerability.circl.lu/vuln/usn-2489-1 USN-2489-1 — unzip vulnerability 2026-09-29T15:27:54.414348+00:00

Affected: Ubuntu:14.04:LTS: unzip

Michal Zalewski discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code.