Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35336.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-35336
Upstream
Published
2015-11-06T18:59:04Z
Modified
2026-04-01T05:12:04.514843Z
Summary
CVE-2015-7696 affecting package unzip for versions less than 6.0-20
Details

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.

References

Affected packages

Azure Linux:3 / unzip

Package

Name
unzip
Purl
pkg:rpm/azure-linux/unzip

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.0-20

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35336.json"