CVE-2019-13232

3.3

LOWCVSS v3

Published

July 4, 2019

CVSS v2

2.1 LOW

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.

unzip

NPMUnzip cross-platform streaming API compatible with fstream and fs.ReadStream

= 6.0NVD

@types/unzip

NPMTypeScript definitions for unzip

= 6.0NVD

madler/unzip

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Fork of InfoZIP UnZip 6.0 for new zip bomb detection patch

= 6.0NVD

Security Advisories

CVE-2019-13232

Description

More on this CVE