CVE:CVE-2022-0529
CNNVD:CNNVD-202202-865
Info-ZIP UnZip是美国Greg Roelofs个人开发者的一套基于Unix平台的用于对“.zip”文件格式进行解压的工具。
Info-ZIP unzip存在缓冲区错误漏洞，该漏洞源于宽字符串到本地字符串的转换过程中存在安全问题导致越界写，攻击者利用该漏洞致崩溃或代码执行。
solution:Upgrade unzip_project unzip to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0