DEBIAN-CVE-2014-9485

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/DEBIAN-CVE-2014-9485

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-9485.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2014-9485

Upstream

CVE-2014-9485

Published

2018-01-16T19:29:00Z

Modified

2025-09-19T06:16:59Z

Summary

[none]

Details

Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive.

References

https://security-tracker.debian.org/tracker/CVE-2014-9485

Affected packages

Debian:11 / minizip

Package

Name: minizip
Purl: pkg:deb/debian/minizip?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1-6

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / minizip

Package

Name: minizip
Purl: pkg:deb/debian/minizip?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1-6

Ecosystem specific

{
    "urgency": "low"
}