https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T23:34:24.002781+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-4217 CVE-2021-4217 2026-09-28T23:34:24.040822+00:00

Affected: unzip

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

 https://vulnerability.circl.lu/vuln/usn-5673-1 USN-5673-1 — unzip vulnerabilities 2026-09-28T23:34:24.040906+00:00

Affected: Ubuntu:Pro:14.04:LTS: unzip, Ubuntu:Pro:16.04:LTS: unzip, Ubuntu:18.04:LTS: unzip, Ubuntu:20.04:LTS: unzip, Ubuntu:22.04:LTS: unzip

It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip file, an attacker could possibly use this issue to cause unzip to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-4217)

It was discovered that unzip did not properly perform bounds checking while converting wide strings to local strings. If a user were tricked into opening a specially crafted zip file, an attacker could possibly use this issue to cause unzip to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-0529, CVE-2022-0530)