Info-ZIP UnZip 资源管理错误漏洞

目前厂商暂未发布修复措施解决此安全问题，建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法：

https://github.com/madler/unzip

来源:MISC

链接:https://github.com/madler/unzip

来源:CONFIRM

链接:https://support.f5.com/csp/article/K80311892?utm_source=f5support&utm_medium=RSS

来源:GENTOO

链接:https://security.gentoo.org/glsa/202003-58

来源:MISC

链接:https://www.bamsoftware.com/hacks/zipbomb/

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20190814-0002/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2019/07/msg00005.html

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2019/07/msg00027.html

来源:lists.debian.org

链接:https://lists.debian.org/debian-lts-announce/2019/07/msg00005.html

来源:support.f5.com

链接:https://support.f5.com/csp/article/K80311892

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-appliance-is-affected-by-a-denial-of-service-vulnerability-cve-2019-13232/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/160607/Ubuntu-Security-Notice-USN-4672-1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3700/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-datapower-gateway-may-allow-a-potential-dos-when-importing-malicious-zip-files-cve-2019-13232/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3519/

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/UnZip-denial-of-service-via-Better-Zip-Bomb-Overlapping-29701

来源:pivotal.io

链接:https://pivotal.io/security/cve-2019-13232

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/158637/Red-Hat-Security-Advisory-2020-3194-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/157438/Red-Hat-Security-Advisory-2020-1787-01.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-qradar-network-security-is-affected-by-multiple-vulnerabilities/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2593/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.4455/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2030/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.2478/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.2478.2/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2200/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3894/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-unzip-as-used-by-ibm-qradar-siem-is-vulnerable-to-denial-of-service-cve-2019-13232/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1495/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1187/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-13232

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/158033/Red-Hat-Security-Advisory-2020-2486-01.html