The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attacke…

Published 18 y ago 2008-03-17 · modified 4 mo ago 2026-06-16 · JSON

CVSS

9.3

v2.0 · NVD

CISA KEV

not known exploited

EPSS

6.3%

percentile 94%

Public exploits

none known

The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.

Exploit prediction (EPSS)

6.29% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	9.3	`AV:N/AC:M/Au:N/C:C/I:C/A:C`

Affected products

info-zip unzip

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secunia.com /advisories/29415 · third-party-advisory, x_refsource_SECUNIA, x_transferred
securityfocus.com /archive/1/489967/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
secunia.com /advisories/29427 · third-party-advisory, x_refsource_SECUNIA, x_transferred
vupen.com /english/advisories/2008/1744 · vdb-entry, x_refsource_VUPEN, x_transferred
secunia.com /advisories/29440 · third-party-advisory, x_refsource_SECUNIA, x_transferred
debian.org /security/2008/dsa-1522 · vendor-advisory, x_refsource_DEBIAN, x_transferred
secunia.com /advisories/29432 · third-party-advisory, x_refsource_SECUNIA, x_transferred
issues.rpath.com /browse/RPL-2317 · x_refsource_CONFIRM, x_transferred
wiki.rpath.com /Advisories:rPSA-2008-0116 · x_refsource_CONFIRM, x_transferred
vmware.com /security/advisories/VMSA-2008-0009.html · x_refsource_CONFIRM, x_transferred
lists.apple.com /archives/security-announce/2010//Mar/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
secunia.com /advisories/29392 · third-party-advisory, x_refsource_SECUNIA, x_transferred
secunia.com /advisories/29681 · third-party-advisory, x_refsource_SECUNIA, x_transferred
mandriva.com /en/security/advisories?name=MDVSA-2008:068 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
lists.opensuse.org /opensuse-security-announce/2008-03/msg00008.html · vendor-advisory, x_refsource_SUSE, x_transferred
vupen.com /english/advisories/2008/0913/references · vdb-entry, x_refsource_VUPEN, x_transferred
secunia.com /advisories/30535 · third-party-advisory, x_refsource_SECUNIA, x_transferred
ipcop.org /index.php?name=News&file=article&sid=40 · x_refsource_CONFIRM, x_transferred
support.apple.com /kb/HT4077 · x_refsource_CONFIRM, x_transferred
securityfocus.com /archive/1/493080/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
security.gentoo.org /glsa/glsa-200804-06.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9733 · vdb-entry, signature, x_refsource_OVAL, x_transferred
secunia.com /advisories/29406 · third-party-advisory, x_refsource_SECUNIA, x_transferred
secunia.com /advisories/29495 · third-party-advisory, x_refsource_SECUNIA, x_transferred
secunia.com /advisories/31204 · third-party-advisory, x_refsource_SECUNIA, x_transferred
securitytracker.com /id?1019634 · vdb-entry, x_refsource_SECTRACK, x_transferred
redhat.com /support/errata/RHSA-2008-0196.html · vendor-advisory, x_refsource_REDHAT, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/41246 · vdb-entry, x_refsource_XF, x_transferred
ubuntu.com /usn/usn-589-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
securityfocus.com /bid/28288 · vdb-entry, x_refsource_BID, x_transferred
wiki.rpath.com /wiki/Advisories:rPSA-2008-0116 · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2008-0888
NVD: CVE-2008-0888

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.