Medium severity4.0NVD Advisory· Published Jan 18, 2017· Updated Jun 17, 2026
CVE-2016-9844
CVE-2016-9844
Description
Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- cpe:2.3:a:unzip_project:unzip:6.0:*:*:*:*:*:*:*
- osv-coords6 versionspkg:rpm/opensuse/unzip&distro=openSUSE%20Tumbleweedpkg:rpm/suse/unzip&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/unzip&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/unzip&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/unzip&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/unzip&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3
< 6.00-39.1+ 5 more
- (no CPE)range: < 6.00-39.1
- (no CPE)range: < 6.00-33.8.1
- (no CPE)range: < 6.00-11.17.1
- (no CPE)range: < 6.00-33.8.1
- (no CPE)range: < 6.00-11.17.1
- (no CPE)range: < 6.00-33.8.1
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2016/12/05/13nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2016/12/05/19nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2016/12/05/20nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/94728nvdThird Party AdvisoryVDB Entry
- bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750nvdIssue Tracking
News mentions
0No linked articles in our index yet.