Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6938.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-6938
Upstream
Published
2015-11-06T18:59:04Z
Modified
2026-04-01T05:21:52.796513Z
Summary
CVE-2015-7696 affecting package unzip for versions less than 6.0-19
Details

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.

References

Affected packages

Azure Linux:2 / unzip

Package

Name
unzip
Purl
pkg:rpm/azure-linux/unzip

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.0-19

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6938.json"